Skip to content

harbor values.yaml📜

expose.type📜

Type: string

Default value
"ingress"

expose.tls.enabled📜

Type: bool

Default value
true

expose.tls.certSource📜

Type: string

Default value
"auto"

expose.tls.auto.commonName📜

Type: string

Default value
""

expose.tls.secret.secretName📜

Type: string

Default value
""

expose.ingress.hosts.core📜

Type: string

Default value
"core.harbor.domain"

expose.ingress.controller📜

Type: string

Default value
"default"

expose.ingress.kubeVersionOverride📜

Type: string

Default value
""

expose.ingress.className📜

Type: string

Default value
""

expose.ingress.annotations.”ingress.kubernetes.io/ssl-redirect”📜

Type: string

Default value
"true"

expose.ingress.annotations.”ingress.kubernetes.io/proxy-body-size”📜

Type: string

Default value
"0"

expose.ingress.annotations.”nginx.ingress.kubernetes.io/ssl-redirect”📜

Type: string

Default value
"true"

expose.ingress.annotations.”nginx.ingress.kubernetes.io/proxy-body-size”📜

Type: string

Default value
"0"

expose.ingress.labels📜

Type: object

Default value
{}

expose.clusterIP.name📜

Type: string

Default value
"harbor"

expose.clusterIP.staticClusterIP📜

Type: string

Default value
""

expose.clusterIP.ports.httpPort📜

Type: int

Default value
80

expose.clusterIP.ports.httpsPort📜

Type: int

Default value
443

expose.clusterIP.annotations📜

Type: object

Default value
{}

expose.clusterIP.labels📜

Type: object

Default value
{}

expose.nodePort.name📜

Type: string

Default value
"harbor"

expose.nodePort.ports.http.port📜

Type: int

Default value
80

expose.nodePort.ports.http.nodePort📜

Type: int

Default value
30002

expose.nodePort.ports.https.port📜

Type: int

Default value
443

expose.nodePort.ports.https.nodePort📜

Type: int

Default value
30003

expose.nodePort.annotations📜

Type: object

Default value
{}

expose.nodePort.labels📜

Type: object

Default value
{}

expose.loadBalancer.name📜

Type: string

Default value
"harbor"

expose.loadBalancer.IP📜

Type: string

Default value
""

expose.loadBalancer.ports.httpPort📜

Type: int

Default value
80

expose.loadBalancer.ports.httpsPort📜

Type: int

Default value
443

expose.loadBalancer.annotations📜

Type: object

Default value
{}

expose.loadBalancer.labels📜

Type: object

Default value
{}

expose.loadBalancer.sourceRanges📜

Type: list

Default value
[]

externalURL📜

Type: string

Default value
"https://core.harbor.domain"

persistence.enabled📜

Type: bool

Default value
true

persistence.resourcePolicy📜

Type: string

Default value
"keep"

persistence.persistentVolumeClaim.registry.existingClaim📜

Type: string

Default value
""

persistence.persistentVolumeClaim.registry.storageClass📜

Type: string

Default value
""

persistence.persistentVolumeClaim.registry.subPath📜

Type: string

Default value
""

persistence.persistentVolumeClaim.registry.accessMode📜

Type: string

Default value
"ReadWriteOnce"

persistence.persistentVolumeClaim.registry.size📜

Type: string

Default value
"5Gi"

persistence.persistentVolumeClaim.registry.annotations📜

Type: object

Default value
{}

persistence.persistentVolumeClaim.jobservice.jobLog.existingClaim📜

Type: string

Default value
""

persistence.persistentVolumeClaim.jobservice.jobLog.storageClass📜

Type: string

Default value
""

persistence.persistentVolumeClaim.jobservice.jobLog.subPath📜

Type: string

Default value
""

persistence.persistentVolumeClaim.jobservice.jobLog.accessMode📜

Type: string

Default value
"ReadWriteOnce"

persistence.persistentVolumeClaim.jobservice.jobLog.size📜

Type: string

Default value
"1Gi"

persistence.persistentVolumeClaim.jobservice.jobLog.annotations📜

Type: object

Default value
{}

persistence.persistentVolumeClaim.jobservice.scanDataExports.existingClaim📜

Type: string

Default value
""

persistence.persistentVolumeClaim.jobservice.scanDataExports.storageClass📜

Type: string

Default value
""

persistence.persistentVolumeClaim.jobservice.scanDataExports.subPath📜

Type: string

Default value
""

persistence.persistentVolumeClaim.jobservice.scanDataExports.accessMode📜

Type: string

Default value
"ReadWriteOnce"

persistence.persistentVolumeClaim.jobservice.scanDataExports.size📜

Type: string

Default value
"1Gi"

persistence.persistentVolumeClaim.jobservice.scanDataExports.annotations📜

Type: object

Default value
{}

persistence.persistentVolumeClaim.database.existingClaim📜

Type: string

Default value
""

persistence.persistentVolumeClaim.database.storageClass📜

Type: string

Default value
""

persistence.persistentVolumeClaim.database.subPath📜

Type: string

Default value
""

persistence.persistentVolumeClaim.database.accessMode📜

Type: string

Default value
"ReadWriteOnce"

persistence.persistentVolumeClaim.database.size📜

Type: string

Default value
"1Gi"

persistence.persistentVolumeClaim.database.annotations📜

Type: object

Default value
{}

persistence.persistentVolumeClaim.redis.existingClaim📜

Type: string

Default value
""

persistence.persistentVolumeClaim.redis.storageClass📜

Type: string

Default value
""

persistence.persistentVolumeClaim.redis.subPath📜

Type: string

Default value
""

persistence.persistentVolumeClaim.redis.accessMode📜

Type: string

Default value
"ReadWriteOnce"

persistence.persistentVolumeClaim.redis.size📜

Type: string

Default value
"1Gi"

persistence.persistentVolumeClaim.redis.annotations📜

Type: object

Default value
{}

persistence.persistentVolumeClaim.trivy.existingClaim📜

Type: string

Default value
""

persistence.persistentVolumeClaim.trivy.storageClass📜

Type: string

Default value
""

persistence.persistentVolumeClaim.trivy.subPath📜

Type: string

Default value
""

persistence.persistentVolumeClaim.trivy.accessMode📜

Type: string

Default value
"ReadWriteOnce"

persistence.persistentVolumeClaim.trivy.size📜

Type: string

Default value
"5Gi"

persistence.persistentVolumeClaim.trivy.annotations📜

Type: object

Default value
{}

persistence.imageChartStorage.disableredirect📜

Type: bool

Default value
false

persistence.imageChartStorage.type📜

Type: string

Default value
"filesystem"

persistence.imageChartStorage.filesystem.rootdirectory📜

Type: string

Default value
"/storage"

persistence.imageChartStorage.azure.accountname📜

Type: string

Default value
"accountname"

persistence.imageChartStorage.azure.accountkey📜

Type: string

Default value
"base64encodedaccountkey"

persistence.imageChartStorage.azure.container📜

Type: string

Default value
"containername"

persistence.imageChartStorage.azure.existingSecret📜

Type: string

Default value
""

persistence.imageChartStorage.gcs.bucket📜

Type: string

Default value
"bucketname"

persistence.imageChartStorage.gcs.encodedkey📜

Type: string

Default value
"base64-encoded-json-key-file"

persistence.imageChartStorage.gcs.existingSecret📜

Type: string

Default value
""

persistence.imageChartStorage.gcs.useWorkloadIdentity📜

Type: bool

Default value
false

persistence.imageChartStorage.s3.region📜

Type: string

Default value
"us-west-1"

persistence.imageChartStorage.s3.bucket📜

Type: string

Default value
"bucketname"

persistence.imageChartStorage.swift.authurl📜

Type: string

Default value
"https://storage.myprovider.com/v3/auth"

persistence.imageChartStorage.swift.username📜

Type: string

Default value
"username"

persistence.imageChartStorage.swift.password📜

Type: string

Default value
"password"

persistence.imageChartStorage.swift.container📜

Type: string

Default value
"containername"

persistence.imageChartStorage.swift.existingSecret📜

Type: string

Default value
""

persistence.imageChartStorage.oss.accesskeyid📜

Type: string

Default value
"accesskeyid"

persistence.imageChartStorage.oss.accesskeysecret📜

Type: string

Default value
"accesskeysecret"

persistence.imageChartStorage.oss.region📜

Type: string

Default value
"regionname"

persistence.imageChartStorage.oss.bucket📜

Type: string

Default value
"bucketname"

persistence.imageChartStorage.oss.existingSecret📜

Type: string

Default value
""

existingSecretAdminPasswordKey📜

Type: string

Default value
"HARBOR_ADMIN_PASSWORD"

harborAdminPassword📜

Type: string

Default value
"Harbor12345"

internalTLS.enabled📜

Type: bool

Default value
false

internalTLS.strong_ssl_ciphers📜

Type: bool

Default value
false

internalTLS.certSource📜

Type: string

Default value
"auto"

internalTLS.trustCa📜

Type: string

Default value
""

internalTLS.core.secretName📜

Type: string

Default value
""

internalTLS.core.crt📜

Type: string

Default value
""

internalTLS.core.key📜

Type: string

Default value
""

internalTLS.jobservice.secretName📜

Type: string

Default value
""

internalTLS.jobservice.crt📜

Type: string

Default value
""

internalTLS.jobservice.key📜

Type: string

Default value
""

internalTLS.registry.secretName📜

Type: string

Default value
""

internalTLS.registry.crt📜

Type: string

Default value
""

internalTLS.registry.key📜

Type: string

Default value
""

internalTLS.portal.secretName📜

Type: string

Default value
""

internalTLS.portal.crt📜

Type: string

Default value
""

internalTLS.portal.key📜

Type: string

Default value
""

internalTLS.trivy.secretName📜

Type: string

Default value
""

internalTLS.trivy.crt📜

Type: string

Default value
""

internalTLS.trivy.key📜

Type: string

Default value
""

ipFamily.ipv6.enabled📜

Type: bool

Default value
true

ipFamily.ipv4.enabled📜

Type: bool

Default value
true

imagePullPolicy📜

Type: string

Default value
"IfNotPresent"

imagePullSecrets[0].name📜

Type: string

Default value
"private-registry"

updateStrategy.type📜

Type: string

Default value
"RollingUpdate"

logLevel📜

Type: string

Default value
"info"

caSecretName📜

Type: string

Default value
""

secretKey📜

Type: string

Default value
"not-a-secure-key"

existingSecretSecretKey📜

Type: string

Default value
""

proxy.httpProxy📜

Type: string

Default value
nil

proxy.httpsProxy📜

Type: string

Default value
nil

proxy.noProxy📜

Type: string

Default value
"127.0.0.1,localhost,.local,.internal"

proxy.components[0]📜

Type: string

Default value
"core"

proxy.components[1]📜

Type: string

Default value
"jobservice"

proxy.components[2]📜

Type: string

Default value
"trivy"

enableMigrateHelmHook📜

Type: bool

Default value
false

metrics.enabled📜

Type: bool

Default value
false

metrics.core.path📜

Type: string

Default value
"/metrics"

metrics.core.port📜

Type: int

Default value
8001

metrics.registry.path📜

Type: string

Default value
"/metrics"

metrics.registry.port📜

Type: int

Default value
8001

metrics.jobservice.path📜

Type: string

Default value
"/metrics"

metrics.jobservice.port📜

Type: int

Default value
8001

metrics.exporter.path📜

Type: string

Default value
"/metrics"

metrics.exporter.port📜

Type: int

Default value
8001

metrics.serviceMonitor.enabled📜

Type: bool

Default value
false

metrics.serviceMonitor.additionalLabels📜

Type: object

Default value
{}

metrics.serviceMonitor.interval📜

Type: string

Default value
""

metrics.serviceMonitor.metricRelabelings📜

Type: list

Default value
[]

metrics.serviceMonitor.relabelings📜

Type: list

Default value
[]

trace.enabled📜

Type: bool

Default value
false

trace.provider📜

Type: string

Default value
"jaeger"

trace.sample_rate📜

Type: int

Default value
1

trace.jaeger.endpoint📜

Type: string

Default value
"http://hostname:14268/api/traces"

trace.otel.endpoint📜

Type: string

Default value
"hostname:4318"

trace.otel.url_path📜

Type: string

Default value
"/v1/traces"

trace.otel.compression📜

Type: bool

Default value
false

trace.otel.insecure📜

Type: bool

Default value
true

trace.otel.timeout📜

Type: int

Default value
10

cache.enabled📜

Type: bool

Default value
false

cache.expireHours📜

Type: int

Default value
24

containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

nginx.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/nginx/nginx"

nginx.image.tag📜

Type: string

Default value
"1.27.2"

nginx.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

nginx.serviceAccountName📜

Type: string

Default value
""

nginx.automountServiceAccountToken📜

Type: bool

Default value
false

nginx.replicas📜

Type: int

Default value
1

nginx.revisionHistoryLimit📜

Type: int

Default value
10

nginx.resources.requests.memory📜

Type: string

Default value
"256Mi"

nginx.resources.requests.cpu📜

Type: string

Default value
"100m"

nginx.resources.limits.cpu📜

Type: string

Default value
"100m"

nginx.resources.limits.memory📜

Type: string

Default value
"256Mi"

nginx.extraEnvVars📜

Type: list

Default value
[]

nginx.nodeSelector📜

Type: object

Default value
{}

nginx.tolerations📜

Type: list

Default value
[]

nginx.affinity📜

Type: object

Default value
{}

nginx.topologySpreadConstraints📜

Type: list

Default value
[]

nginx.podAnnotations📜

Type: object

Default value
{}

nginx.podLabels📜

Type: object

Default value
{}

nginx.priorityClassName📜

Type: string

Default value
nil

portal.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-portal"

portal.image.tag📜

Type: string

Default value
"v2.12.0"

portal.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

portal.serviceAccountName📜

Type: string

Default value
""

portal.automountServiceAccountToken📜

Type: bool

Default value
false

portal.replicas📜

Type: int

Default value
1

portal.revisionHistoryLimit📜

Type: int

Default value
10

portal.resources.requests.memory📜

Type: string

Default value
"256Mi"

portal.resources.requests.cpu📜

Type: string

Default value
"100m"

portal.resources.limits.cpu📜

Type: string

Default value
"100m"

portal.resources.limits.memory📜

Type: string

Default value
"256Mi"

portal.extraEnvVars📜

Type: list

Default value
[]

portal.nodeSelector📜

Type: object

Default value
{}

portal.tolerations📜

Type: list

Default value
[]

portal.affinity📜

Type: object

Default value
{}

portal.topologySpreadConstraints📜

Type: list

Default value
[]

portal.podAnnotations📜

Type: object

Default value
{}

portal.podLabels📜

Type: object

Default value
{}

portal.serviceAnnotations📜

Type: object

Default value
{}

portal.priorityClassName📜

Type: string

Default value
nil

portal.initContainers📜

Type: list

Default value
[]

core.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-core"

core.image.tag📜

Type: string

Default value
"v2.12.0"

core.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

core.serviceAccountName📜

Type: string

Default value
""

core.automountServiceAccountToken📜

Type: bool

Default value
false

core.replicas📜

Type: int

Default value
1

core.revisionHistoryLimit📜

Type: int

Default value
10

core.startupProbe.enabled📜

Type: bool

Default value
true

core.startupProbe.initialDelaySeconds📜

Type: int

Default value
30

core.resources.requests.memory📜

Type: string

Default value
"256Mi"

core.resources.requests.cpu📜

Type: string

Default value
"100m"

core.resources.limits.cpu📜

Type: string

Default value
"100m"

core.resources.limits.memory📜

Type: string

Default value
"256Mi"

core.extraEnvVars📜

Type: list

Default value
[]

core.nodeSelector📜

Type: object

Default value
{}

core.tolerations📜

Type: list

Default value
[]

core.affinity📜

Type: object

Default value
{}

core.topologySpreadConstraints📜

Type: list

Default value
[]

core.podAnnotations📜

Type: object

Default value
{}

core.podLabels📜

Type: object

Default value
{}

core.serviceAnnotations📜

Type: object

Default value
{}

core.priorityClassName📜

Type: string

Default value
nil

core.initContainers📜

Type: list

Default value
[]

core.configureUserSettings📜

Type: string

Default value
nil

core.quotaUpdateProvider📜

Type: string

Default value
"db"

core.secret📜

Type: string

Default value
""

core.existingSecret📜

Type: string

Default value
""

core.secretName📜

Type: string

Default value
""

core.tokenKey📜

Type: string

Default value
nil

core.tokenCert📜

Type: string

Default value
nil

core.xsrfKey📜

Type: string

Default value
""

core.existingXsrfSecret📜

Type: string

Default value
""

core.existingXsrfSecretKey📜

Type: string

Default value
"CSRF_KEY"

core.artifactPullAsyncFlushDuration📜

Type: string

Default value
nil

core.gdpr.deleteUser📜

Type: bool

Default value
false

core.gdpr.auditLogsCompliant📜

Type: bool

Default value
false

jobservice.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-jobservice"

jobservice.image.tag📜

Type: string

Default value
"v2.12.0"

jobservice.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

jobservice.serviceAccountName📜

Type: string

Default value
""

jobservice.automountServiceAccountToken📜

Type: bool

Default value
false

jobservice.replicas📜

Type: int

Default value
1

jobservice.revisionHistoryLimit📜

Type: int

Default value
10

jobservice.resources.requests.memory📜

Type: string

Default value
"256Mi"

jobservice.resources.requests.cpu📜

Type: string

Default value
"100m"

jobservice.resources.limits.cpu📜

Type: string

Default value
"100m"

jobservice.resources.limits.memory📜

Type: string

Default value
"256Mi"

jobservice.extraEnvVars📜

Type: list

Default value
[]

jobservice.nodeSelector📜

Type: object

Default value
{}

jobservice.tolerations📜

Type: list

Default value
[]

jobservice.affinity📜

Type: object

Default value
{}

jobservice.topologySpreadConstraints📜

Type: string

Default value
nil

jobservice.podAnnotations📜

Type: object

Default value
{}

jobservice.podLabels📜

Type: object

Default value
{}

jobservice.priorityClassName📜

Type: string

Default value
nil

jobservice.initContainers📜

Type: list

Default value
[]

jobservice.maxJobWorkers📜

Type: int

Default value
10

jobservice.jobLoggers[0]📜

Type: string

Default value
"file"

jobservice.loggerSweeperDuration📜

Type: int

Default value
14

jobservice.notification.webhook_job_max_retry📜

Type: int

Default value
3

jobservice.notification.webhook_job_http_client_timeout📜

Type: int

Default value
3

jobservice.reaper.max_update_hours📜

Type: int

Default value
24

jobservice.reaper.max_dangling_hours📜

Type: int

Default value
168

jobservice.secret📜

Type: string

Default value
""

jobservice.existingSecret📜

Type: string

Default value
""

jobservice.existingSecretKey📜

Type: string

Default value
"JOBSERVICE_SECRET"

registry.registry.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/goharbor/registry"

registry.registry.image.tag📜

Type: string

Default value
"v2.12.0"

registry.registry.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

registry.registry.resources.requests.memory📜

Type: string

Default value
"256Mi"

registry.registry.resources.requests.cpu📜

Type: string

Default value
"100m"

registry.registry.resources.limits.cpu📜

Type: string

Default value
"100m"

registry.registry.resources.limits.memory📜

Type: string

Default value
"256Mi"

registry.registry.extraEnvVars📜

Type: list

Default value
[]

registry.controller.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-registryctl"

registry.controller.image.tag📜

Type: string

Default value
"v2.12.0"

registry.controller.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

registry.controller.resources.requests.memory📜

Type: string

Default value
"256Mi"

registry.controller.resources.requests.cpu📜

Type: string

Default value
"100m"

registry.controller.resources.limits.cpu📜

Type: string

Default value
"100m"

registry.controller.resources.limits.memory📜

Type: string

Default value
"256Mi"

registry.controller.extraEnvVars📜

Type: list

Default value
[]

registry.serviceAccount.create📜

Type: bool

Default value
false

registry.serviceAccount.annotations📜

Type: object

Default value
{}

registry.serviceAccount.imagePullSecrets📜

Type: list

Default value
[]

registry.serviceAccountName📜

Type: string

Default value
""

registry.automountServiceAccountToken📜

Type: bool

Default value
false

registry.replicas📜

Type: int

Default value
1

registry.revisionHistoryLimit📜

Type: int

Default value
10

registry.nodeSelector📜

Type: object

Default value
{}

registry.tolerations📜

Type: list

Default value
[]

registry.affinity📜

Type: object

Default value
{}

registry.topologySpreadConstraints📜

Type: list

Default value
[]

registry.podAnnotations📜

Type: object

Default value
{}

registry.podLabels📜

Type: object

Default value
{}

registry.priorityClassName📜

Type: string

Default value
nil

registry.initContainers📜

Type: list

Default value
[]

registry.secret📜

Type: string

Default value
""

registry.existingSecret📜

Type: string

Default value
""

registry.existingSecretKey📜

Type: string

Default value
"REGISTRY_HTTP_SECRET"

registry.relativeurls📜

Type: bool

Default value
false

registry.credentials.username📜

Type: string

Default value
"harbor_registry_user"

registry.credentials.password📜

Type: string

Default value
"harbor_registry_password"

registry.credentials.existingSecret📜

Type: string

Default value
""

registry.credentials.htpasswdString📜

Type: string

Default value
""

registry.middleware.enabled📜

Type: bool

Default value
false

registry.middleware.type📜

Type: string

Default value
"cloudFront"

registry.middleware.cloudFront.baseurl📜

Type: string

Default value
"example.cloudfront.net"

registry.middleware.cloudFront.keypairid📜

Type: string

Default value
"KEYPAIRID"

registry.middleware.cloudFront.duration📜

Type: string

Default value
"3000s"

registry.middleware.cloudFront.ipfilteredby📜

Type: string

Default value
"none"

registry.middleware.cloudFront.privateKeySecret📜

Type: string

Default value
"my-secret"

registry.upload_purging.enabled📜

Type: bool

Default value
true

registry.upload_purging.age📜

Type: string

Default value
"168h"

registry.upload_purging.interval📜

Type: string

Default value
"24h"

registry.upload_purging.dryrun📜

Type: bool

Default value
false

trivy.enabled📜

Type: bool

Default value
true

trivy.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/goharbor/trivy-adapter"

trivy.image.tag📜

Type: string

Default value
"v2.12.0"

trivy.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

trivy.serviceAccountName📜

Type: string

Default value
""

trivy.automountServiceAccountToken📜

Type: bool

Default value
false

trivy.replicas📜

Type: int

Default value
1

trivy.resources.requests.cpu📜

Type: string

Default value
"200m"

trivy.resources.requests.memory📜

Type: string

Default value
"512Mi"

trivy.resources.limits.cpu📜

Type: int

Default value
1

trivy.resources.limits.memory📜

Type: string

Default value
"1Gi"

trivy.extraEnvVars📜

Type: list

Default value
[]

trivy.nodeSelector📜

Type: object

Default value
{}

trivy.tolerations📜

Type: list

Default value
[]

trivy.affinity📜

Type: object

Default value
{}

trivy.topologySpreadConstraints📜

Type: list

Default value
[]

trivy.podAnnotations📜

Type: object

Default value
{}

trivy.podLabels📜

Type: object

Default value
{}

trivy.priorityClassName📜

Type: string

Default value
nil

trivy.initContainers📜

Type: list

Default value
[]

trivy.debugMode📜

Type: bool

Default value
false

trivy.vulnType📜

Type: string

Default value
"os,library"

trivy.severity📜

Type: string

Default value
"UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL"

trivy.ignoreUnfixed📜

Type: bool

Default value
false

trivy.insecure📜

Type: bool

Default value
false

trivy.gitHubToken📜

Type: string

Default value
""

trivy.skipUpdate📜

Type: bool

Default value
false

trivy.skipJavaDBUpdate📜

Type: bool

Default value
false

trivy.offlineScan📜

Type: bool

Default value
false

trivy.securityCheck📜

Type: string

Default value
"vuln"

trivy.timeout📜

Type: string

Default value
"5m0s"

database.maxIdleConns📜

Type: string

Default value
"100"

database.maxOpenConns📜

Type: string

Default value
"1000"

database.type📜

Type: string

Default value
"external"

database.internal.image.repository📜

Type: string

Default value
"goharbor/harbor-db"

database.internal.image.tag📜

Type: string

Default value
"v2.12.0"

database.internal.serviceAccountName📜

Type: string

Default value
""

database.internal.automountServiceAccountToken📜

Type: bool

Default value
false

database.internal.password📜

Type: string

Default value
"changeit"

database.internal.shmSizeLimit📜

Type: string

Default value
"512Mi"

database.internal.resources.requests.memory📜

Type: string

Default value
"256Mi"

database.internal.resources.requests.cpu📜

Type: string

Default value
"100m"

database.internal.resources.limits.cpu📜

Type: string

Default value
"100m"

database.internal.resources.limits.memory📜

Type: string

Default value
"256Mi"

database.internal.extraEnvVars📜

Type: list

Default value
[]

database.internal.nodeSelector📜

Type: object

Default value
{}

database.internal.tolerations📜

Type: list

Default value
[]

database.internal.affinity📜

Type: object

Default value
{}

database.internal.priorityClassName📜

Type: string

Default value
nil

database.internal.extrInitContainers📜

Type: list

Default value
[]

database.internal.initContainer.migrator📜

Type: object

Default value
{}

database.internal.initContainer.resources.requests.memory📜

Type: string

Default value
"128Mi"

database.internal.initContainer.resources.requests.cpu📜

Type: string

Default value
"100m"

database.internal.initContainer.resources.limits.cpu📜

Type: string

Default value
"100m"

database.internal.initContainer.resources.limits.memory📜

Type: string

Default value
"128Mi"

database.internal.initContainer.permissions📜

Type: object

Default value
{}

database.external.host📜

Type: string

Default value
"harbor-postgresql"

database.external.port📜

Type: string

Default value
"5432"

database.external.username📜

Type: string

Default value
"harborUser"

database.external.password📜

Type: string

Default value
"harborPW"

database.external.coreDatabase📜

Type: string

Default value
"harborUser"

database.external.existingSecret📜

Type: string

Default value
""

database.external.sslmode📜

Type: string

Default value
"disable"

postgresql.enabled📜

Type: bool

Default value
true

postgresql.postgresqlUsername📜

Type: string

Default value
"harborUser"

postgresql.postgresqlPassword📜

Type: string

Default value
"harborPW"

postgresql.coreDatabase📜

Type: string

Default value
"harborUser"

postgresql.maxIdleConns📜

Type: int

Default value
100

postgresql.maxOpenConns📜

Type: int

Default value
900

postgresql.networkPolicy.enabled📜

Type: bool

Default value
false

postgresql.global.imagePullSecrets[0]📜

Type: string

Default value
"private-registry"

postgresql.image.registry📜

Type: string

Default value
"registry1.dso.mil"

postgresql.image.repository📜

Type: string

Default value
"ironbank/opensource/postgres/postgresql12"

postgresql.image.tag📜

Type: string

Default value
"12.21"

postgresql.image.debug📜

Type: bool

Default value
true

postgresql.securityContext.enabled📜

Type: bool

Default value
true

postgresql.securityContext.fsGroup📜

Type: int

Default value
26

postgresql.securityContext.runAsUser📜

Type: int

Default value
26

postgresql.securityContext.runAsGroup📜

Type: int

Default value
26

postgresql.containerSecurityContext.enabled📜

Type: bool

Default value
true

postgresql.containerSecurityContext.runAsUser📜

Type: int

Default value
26

postgresql.containerSecurityContext.capabilities.drop[0]📜

Type: string

Default value
"ALL"

postgresql.existingSecret📜

Type: string

Default value
""

postgresql.resources.requests.cpu📜

Type: string

Default value
"250m"

postgresql.resources.requests.memory📜

Type: string

Default value
"256Mi"

postgresql.resources.limits.cpu📜

Type: string

Default value
"250m"

postgresql.resources.limits.memory📜

Type: string

Default value
"256Mi"

postgresql.podAnnotations📜

Type: object

Default value
{}

postgresql.initdbUser📜

Type: string

Default value
"harborUser"

postgresql.initdbPassword📜

Type: string

Default value
"harborPW"

postgresql.externalDatabase.host📜

Type: string

Default value
"localhost"

postgresql.externalDatabase.port📜

Type: int

Default value
5432

postgresql.externalDatabase.user📜

Type: string

Default value
"bn_harbor"

postgresql.externalDatabase.password📜

Type: string

Default value
""

postgresql.externalDatabase.sslmode📜

Type: string

Default value
"disable"

postgresql.externalDatabase.coreDatabase📜

Type: string

Default value
""

postgresql.podLabels📜

Type: object

Default value
{}

redis.type📜

Type: string

Default value
"external"

redis.internal.image.repository📜

Type: string

Default value
"goharbor/redis-photon"

redis.internal.image.tag📜

Type: string

Default value
"v2.12.0"

redis.internal.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

redis.internal.serviceAccountName📜

Type: string

Default value
""

redis.internal.automountServiceAccountToken📜

Type: bool

Default value
false

redis.internal.resources.requests.memory📜

Type: string

Default value
"256Mi"

redis.internal.resources.requests.cpu📜

Type: string

Default value
"100m"

redis.internal.resources.limits.memory📜

Type: string

Default value
"256Mi"

redis.internal.resources.limits.cpu📜

Type: string

Default value
"100m"

redis.internal.nodeSelector📜

Type: object

Default value
{}

redis.internal.tolerations📜

Type: list

Default value
[]

redis.internal.affinity📜

Type: object

Default value
{}

redis.internal.priorityClassName📜

Type: string

Default value
nil

redis.internal.initContainers📜

Type: list

Default value
[]

redis.internal.jobserviceDatabaseIndex📜

Type: string

Default value
"1"

redis.internal.registryDatabaseIndex📜

Type: string

Default value
"2"

redis.internal.trivyAdapterIndex📜

Type: string

Default value
"5"

redis.external.addr📜

Type: string

Default value
"harbor-redis-bb-master:6379"

redis.external.sentinelMasterSet📜

Type: string

Default value
""

redis.external.coreDatabaseIndex📜

Type: string

Default value
"0"

redis.external.jobserviceDatabaseIndex📜

Type: string

Default value
"1"

redis.external.registryDatabaseIndex📜

Type: string

Default value
"2"

redis.external.trivyAdapterIndex📜

Type: string

Default value
"5"

redis.external.username📜

Type: string

Default value
""

redis.external.password📜

Type: string

Default value
""

redis.external.existingSecret📜

Type: string

Default value
""

redis.podAnnotations📜

Type: object

Default value
{}

redis-bb.enabled📜

Type: bool

Default value
true

Description: Enable BigBang provided redis sub-chart. Disable if using external cloud elasticache or redis endpoint and fill in redis.external.addr in above section

redis-bb.auth.enabled📜

Type: bool

Default value
false

redis-bb.istio.redis.enabled📜

Type: bool

Default value
false

redis-bb.image.registry📜

Type: string

Default value
"registry1.dso.mil"

redis-bb.image.repository📜

Type: string

Default value
"ironbank/bitnami/redis"

redis-bb.image.tag📜

Type: string

Default value
"7.0.0-debian-10-r3"

redis-bb.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

redis-bb.networkPolicies.enabled📜

Type: bool

Default value
true

redis-bb.networkPolicies.controlPlaneCidr📜

Type: string

Default value
"0.0.0.0/0"

redis-bb.master.containerSecurityContext.enabled📜

Type: bool

Default value
true

redis-bb.master.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

redis-bb.master.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

redis-bb.master.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

redis-bb.replica.replicaCount📜

Type: int

Default value
0

redis-bb.replica.containerSecurityContext.enabled📜

Type: bool

Default value
true

redis-bb.replica.containerSecurityContext.runAsUser📜

Type: int

Default value
1000

redis-bb.replica.containerSecurityContext.runAsGroup📜

Type: int

Default value
1000

redis-bb.replica.containerSecurityContext.runAsNonRoot📜

Type: bool

Default value
true

redis-bb.commonConfiguration📜

Type: string

Default value
"# Enable AOF https://redis.io/topics/persistence#append-only-file\nappendonly no\nmaxmemory 200mb\nmaxmemory-policy allkeys-lru\nsave \"\""

redis-bb.podLabels📜

Type: object

Default value
{}

exporter.image.repository📜

Type: string

Default value
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-exporter"

exporter.image.tag📜

Type: string

Default value
"v2.12.0"

exporter.image.pullSecrets[0]📜

Type: string

Default value
"private-registry"

exporter.serviceAccountName📜

Type: string

Default value
""

exporter.automountServiceAccountToken📜

Type: bool

Default value
false

exporter.replicas📜

Type: int

Default value
1

exporter.revisionHistoryLimit📜

Type: int

Default value
10

exporter.resources.requests.memory📜

Type: string

Default value
"256Mi"

exporter.resources.requests.cpu📜

Type: string

Default value
"100m"

exporter.resources.limits.cpu📜

Type: string

Default value
"100m"

exporter.resources.limits.memory📜

Type: string

Default value
"256Mi"

exporter.extraEnvVars📜

Type: list

Default value
[]

exporter.podAnnotations📜

Type: object

Default value
{}

exporter.podLabels📜

Type: object

Default value
{}

exporter.nodeSelector📜

Type: object

Default value
{}

exporter.tolerations📜

Type: list

Default value
[]

exporter.affinity📜

Type: object

Default value
{}

exporter.topologySpreadConstraints📜

Type: list

Default value
[]

exporter.priorityClassName📜

Type: string

Default value
nil

exporter.cacheDuration📜

Type: int

Default value
23

exporter.cacheCleanInterval📜

Type: int

Default value
14400

domain📜

Type: string

Default value
"dev.bigbang.mil"

istio.enabled📜

Type: bool

Default value
false

istio.hardened.enabled📜

Type: bool

Default value
false

istio.hardened.customAuthorizationPolicies📜

Type: list

Default value
[]

istio.hardened.monitoring.enabled📜

Type: bool

Default value
false

istio.hardened.monitoring.namespaces[0]📜

Type: string

Default value
"monitoring"

istio.hardened.monitoring.principals[0]📜

Type: string

Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"

istio.hardened.outboundTrafficPolicyMode📜

Type: string

Default value
"REGISTRY_ONLY"

istio.hardened.customServiceEntries📜

Type: list

Default value
[]

istio.mtls.mode📜

Type: string

Default value
"STRICT"

Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic

istio.harbor.gateways[0]📜

Type: string

Default value
"istio-system/public"

istio.harbor.hosts[0]📜

Type: string

Default value
"harbor.{{ .Values.domain }}"

istio.injection📜

Type: string

Default value
"disabled"

monitoring.enabled📜

Type: bool

Default value
false

monitoring.namespace📜

Type: string

Default value
"monitoring"

networkPolicies.enabled📜

Type: bool

Default value
false

networkPolicies.ingressLabels.app📜

Type: string

Default value
"istio-ingressgateway"

networkPolicies.ingressLabels.istio📜

Type: string

Default value
"ingressgateway"

networkPolicies.additionalPolicies📜

Type: list

Default value
[]

openshift📜

Type: bool

Default value
false

bbtests.enabled📜

Type: bool

Default value
false

bbtests.cypress.artifacts📜

Type: bool

Default value
true

bbtests.cypress.envs.cypress_url📜

Type: string

Default value
"http://harbor:80"

bbtests.cypress.envs.cypress_user📜

Type: string

Default value
"admin"

bbtests.cypress.envs.cypress_harbor_password📜

Type: string

Default value
"Harbor12345"

bbtests.cypress.envs.cypress_project📜

Type: string

Default value
"bbcypress-test"

bbtests.scripts.image📜

Type: string

Default value
"registry1.dso.mil/bigbang-ci/devops-tester:1.1.1"

bbtests.scripts.additionalVolumes[0].name📜

Type: string

Default value
"docker-config"

bbtests.scripts.additionalVolumes[0].secret.secretName📜

Type: string

Default value
"private-registry"

bbtests.scripts.additionalVolumes[0].secret.items[0].key📜

Type: string

Default value
".dockerconfigjson"

bbtests.scripts.additionalVolumes[0].secret.items[0].path📜

Type: string

Default value
"auth.json"

bbtests.scripts.additionalVolumeMounts[0].name📜

Type: string

Default value
"docker-config"

bbtests.scripts.additionalVolumeMounts[0].mountPath📜

Type: string

Default value
"/.docker/"

bbtests.scripts.envs.HARBOR_USER📜

Type: string

Default value
"admin"

bbtests.scripts.envs.HARBOR_PASS📜

Type: string

Default value
"Harbor12345"

bbtests.scripts.envs.HARBOR_REGISTRY📜

Type: string

Default value
"harbor-core:80"

bbtests.scripts.envs.HARBOR_PROJECT📜

Type: string

Default value
"library"