harbor values.yaml¶
domain¶
Type: string
"dev.bigbang.mil"
istio.enabled¶
Type: bool
false
istio.mtls.mode¶
Type: string
"STRICT"
istio.sidecar.enabled¶
Type: bool
false
istio.sidecar.outboundTrafficPolicyMode¶
Type: string
"REGISTRY_ONLY"
istio.serviceEntries.custom¶
Type: list
[]
istio.authorizationPolicies.enabled¶
Type: bool
false
istio.authorizationPolicies.generateFromNetpol¶
Type: bool
false
istio.authorizationPolicies.custom¶
Type: list
[]
monitoring.enabled¶
Type: bool
false
monitoring.namespace¶
Type: string
"monitoring"
routes.inbound.harbor.enabled¶
Type: bool
true
routes.inbound.harbor.gateways[0]¶
Type: string
"istio-gateway/public-ingressgateway"
routes.inbound.harbor.hosts[0]¶
Type: string
"harbor.{{ .Values.domain }}"
routes.inbound.harbor.service¶
Type: string
"harbor-core.harbor.svc.cluster.local"
routes.inbound.harbor.port¶
Type: int
80
routes.inbound.harbor.containerPort¶
Type: int
8080
routes.inbound.harbor.selector.app¶
Type: string
"harbor"
routes.inbound.harbor.http[0].name¶
Type: string
"core"
routes.inbound.harbor.http[0].match[0].uri.prefix¶
Type: string
"/api/"
routes.inbound.harbor.http[0].match[1].uri.prefix¶
Type: string
"/c/"
routes.inbound.harbor.http[0].match[2].uri.prefix¶
Type: string
"/chartrepo/"
routes.inbound.harbor.http[0].match[3].uri.prefix¶
Type: string
"/service/"
routes.inbound.harbor.http[0].match[4].uri.prefix¶
Type: string
"/v2/"
routes.inbound.harbor.http[0].route[0].destination.host¶
Type: string
"harbor-core.harbor.svc.cluster.local"
routes.inbound.harbor.http[0].route[0].destination.port.number¶
Type: int
80
routes.inbound.harbor.http[1].route[0].destination.host¶
Type: string
"harbor-portal.harbor.svc.cluster.local"
routes.inbound.harbor.http[1].route[0].destination.port.number¶
Type: int
80
networkPolicies.enabled¶
Type: bool
true
networkPolicies.ingress.to.harbor:8001.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
false
networkPolicies.egress.from.harbor.to.k8s.tempo/tempo:9411¶
Type: bool
false
networkPolicies.additionalPolicies¶
Type: list
[]
openshift¶
Type: bool
false
bbtests.enabled¶
Type: bool
false
bbtests.cypress.artifacts¶
Type: bool
true
bbtests.cypress.envs.cypress_url¶
Type: string
"http://harbor:80"
bbtests.cypress.envs.cypress_user¶
Type: string
"admin"
bbtests.cypress.envs.cypress_harbor_password¶
Type: string
"Harbor12345"
bbtests.cypress.envs.cypress_project¶
Type: string
"bbcypress-test"
bbtests.scripts.image¶
Type: string
"registry1.dso.mil/ironbank/big-bang/devops-tester:1.0"
bbtests.scripts.additionalVolumes[0].name¶
Type: string
"docker-config"
bbtests.scripts.additionalVolumes[0].secret.secretName¶
Type: string
"private-registry"
bbtests.scripts.additionalVolumes[0].secret.items[0].key¶
Type: string
".dockerconfigjson"
bbtests.scripts.additionalVolumes[0].secret.items[0].path¶
Type: string
"auth.json"
bbtests.scripts.additionalVolumeMounts[0].name¶
Type: string
"docker-config"
bbtests.scripts.additionalVolumeMounts[0].mountPath¶
Type: string
"/.docker/"
bbtests.scripts.envs.HARBOR_USER¶
Type: string
"admin"
bbtests.scripts.envs.HARBOR_PASS¶
Type: string
"Harbor12345"
bbtests.scripts.envs.HARBOR_REGISTRY¶
Type: string
"harbor-core:80"
bbtests.scripts.envs.HARBOR_PROJECT¶
Type: string
"library"
postgresql.enabled¶
Type: bool
true
postgresql.auth.username¶
Type: string
"harborUser"
postgresql.auth.password¶
Type: string
"harborPW"
postgresql.auth.database¶
Type: string
"harborUser"
postgresql.maxIdleConns¶
Type: int
100
postgresql.maxOpenConns¶
Type: int
900
postgresql.networkPolicy.enabled¶
Type: bool
false
postgresql.global.imagePullSecrets[0]¶
Type: string
"private-registry"
postgresql.global.security.allowInsecureImages¶
Type: bool
true
postgresql.image.registry¶
Type: string
"registry1.dso.mil"
postgresql.image.repository¶
Type: string
"ironbank/opensource/postgres/postgresql"
postgresql.image.tag¶
Type: string
"18.4"
postgresql.image.debug¶
Type: bool
true
postgresql.securityContext.enabled¶
Type: bool
true
postgresql.securityContext.fsGroup¶
Type: int
1001
postgresql.securityContext.runAsUser¶
Type: int
1001
postgresql.securityContext.runAsGroup¶
Type: int
1001
postgresql.primary.extraVolumeMounts[0].name¶
Type: string
"runtime"
postgresql.primary.extraVolumeMounts[0].mountPath¶
Type: string
"/var/run/postgresql"
postgresql.primary.extraVolumes[0].name¶
Type: string
"runtime"
postgresql.primary.extraVolumes[0].emptyDir¶
Type: object
{}
postgresql.primary.containerSecurityContext.enabled¶
Type: bool
true
postgresql.primary.containerSecurityContext.runAsUser¶
Type: int
1001
postgresql.primary.containerSecurityContext.runAsGroup¶
Type: int
1001
postgresql.primary.containerSecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
postgresql.existingSecret¶
Type: string
""
postgresql.resources.requests.cpu¶
Type: string
"250m"
postgresql.resources.requests.memory¶
Type: string
"256Mi"
postgresql.resources.limits.cpu¶
Type: string
"250m"
postgresql.resources.limits.memory¶
Type: string
"256Mi"
postgresql.podAnnotations¶
Type: object
{}
postgresql.initdbUser¶
Type: string
"harborUser"
postgresql.initdbPassword¶
Type: string
"harborPW"
postgresql.externalDatabase.host¶
Type: string
"localhost"
postgresql.externalDatabase.port¶
Type: int
5432
postgresql.externalDatabase.user¶
Type: string
"bn_harbor"
postgresql.externalDatabase.password¶
Type: string
""
postgresql.externalDatabase.sslmode¶
Type: string
"disable"
postgresql.externalDatabase.coreDatabase¶
Type: string
""
postgresql.podLabels¶
Type: object
{}
redis-bb¶
Type: object
enabled: true
networkPolicies:
enabled: true
upstream:
auth:
enabled: false
commonConfiguration: '# Enable AOF https://redis.io/topics/persistence#append-only-file
appendonly no
maxmemory 200mb
maxmemory-policy allkeys-lru
save ""'
image:
pullSecrets:
- private-registry
tag: 8.10.0
istio:
redis:
enabled: false
master:
containerSecurityContext:
capabilities:
drop:
- ALL
enabled: true
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
resources:
limits:
cpu: 100m
memory: 256Mi
requests:
cpu: 100m
memory: 256Mi
replica:
containerSecurityContext:
capabilities:
drop:
- ALL
enabled: true
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 5
periodSeconds: 10
successThreshold: 1
tcpSocket:
port: 6379
timeoutSeconds: 30
resources:
limits:
cpu: 100m
memory: 256Mi
requests:
cpu: 100m
memory: 256Mi
Description: BigBang HA Redis Passthrough
upstream.imagePullSecrets[0].name¶
Type: string
"private-registry"
upstream.containerSecurityContext.runAsGroup¶
Type: int
1000
upstream.containerSecurityContext.capabilities.drop[0]¶
Type: string
"ALL"
upstream.nginx.image.repository¶
Type: string
"registry1.dso.mil/ironbank/opensource/nginx/nginx"
upstream.nginx.image.tag¶
Type: string
"1.30.4"
upstream.nginx.image.pullSecrets[0]¶
Type: string
"private-registry"
upstream.nginx.serviceAccountName¶
Type: string
""
upstream.nginx.automountServiceAccountToken¶
Type: bool
false
upstream.nginx.replicas¶
Type: int
1
upstream.nginx.revisionHistoryLimit¶
Type: int
10
upstream.nginx.resources.requests.memory¶
Type: string
"256Mi"
upstream.nginx.resources.requests.cpu¶
Type: string
"100m"
upstream.nginx.resources.limits.cpu¶
Type: string
"100m"
upstream.nginx.resources.limits.memory¶
Type: string
"256Mi"
upstream.portal.image.repository¶
Type: string
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-portal"
upstream.portal.image.tag¶
Type: string
"v2.15.2"
upstream.portal.image.pullSecrets[0]¶
Type: string
"private-registry"
upstream.portal.serviceAccountName¶
Type: string
""
upstream.portal.automountServiceAccountToken¶
Type: bool
false
upstream.portal.replicas¶
Type: int
1
upstream.portal.revisionHistoryLimit¶
Type: int
10
upstream.portal.resources.requests.memory¶
Type: string
"256Mi"
upstream.portal.resources.requests.cpu¶
Type: string
"100m"
upstream.portal.resources.limits.cpu¶
Type: string
"100m"
upstream.portal.resources.limits.memory¶
Type: string
"256Mi"
upstream.core.image.repository¶
Type: string
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-core"
upstream.core.image.tag¶
Type: string
"v2.15.2"
upstream.core.image.pullSecrets[0]¶
Type: string
"private-registry"
upstream.core.serviceAccountName¶
Type: string
""
upstream.core.automountServiceAccountToken¶
Type: bool
false
upstream.core.replicas¶
Type: int
1
upstream.core.revisionHistoryLimit¶
Type: int
10
upstream.core.startupProbe.enabled¶
Type: bool
true
upstream.core.startupProbe.initialDelaySeconds¶
Type: int
30
upstream.core.resources.requests.memory¶
Type: string
"256Mi"
upstream.core.resources.requests.cpu¶
Type: string
"100m"
upstream.core.resources.limits.cpu¶
Type: string
"100m"
upstream.core.resources.limits.memory¶
Type: string
"256Mi"
upstream.jobservice.image.repository¶
Type: string
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-jobservice"
upstream.jobservice.image.tag¶
Type: string
"v2.15.2"
upstream.jobservice.image.pullSecrets[0]¶
Type: string
"private-registry"
upstream.jobservice.serviceAccountName¶
Type: string
""
upstream.jobservice.automountServiceAccountToken¶
Type: bool
false
upstream.jobservice.replicas¶
Type: int
1
upstream.jobservice.revisionHistoryLimit¶
Type: int
10
upstream.jobservice.resources.requests.memory¶
Type: string
"256Mi"
upstream.jobservice.resources.requests.cpu¶
Type: string
"100m"
upstream.jobservice.resources.limits.cpu¶
Type: string
"100m"
upstream.jobservice.resources.limits.memory¶
Type: string
"256Mi"
upstream.registry.registry.image.repository¶
Type: string
"registry1.dso.mil/ironbank/opensource/goharbor/registry"
upstream.registry.registry.image.tag¶
Type: string
"v2.15.2"
upstream.registry.registry.image.pullSecrets[0]¶
Type: string
"private-registry"
upstream.registry.registry.resources.requests.memory¶
Type: string
"256Mi"
upstream.registry.registry.resources.requests.cpu¶
Type: string
"100m"
upstream.registry.registry.resources.limits.cpu¶
Type: string
"100m"
upstream.registry.registry.resources.limits.memory¶
Type: string
"256Mi"
upstream.registry.registry.extraEnvVars¶
Type: list
[]
upstream.registry.controller.image.repository¶
Type: string
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-registryctl"
upstream.registry.controller.image.tag¶
Type: string
"v2.15.2"
upstream.registry.controller.image.pullSecrets[0]¶
Type: string
"private-registry"
upstream.registry.controller.resources.requests.memory¶
Type: string
"256Mi"
upstream.registry.controller.resources.requests.cpu¶
Type: string
"100m"
upstream.registry.controller.resources.limits.cpu¶
Type: string
"100m"
upstream.registry.controller.resources.limits.memory¶
Type: string
"256Mi"
upstream.trivy.enabled¶
Type: bool
true
upstream.trivy.image.repository¶
Type: string
"registry1.dso.mil/ironbank/opensource/goharbor/trivy-adapter"
upstream.trivy.image.tag¶
Type: string
"v2.15.2"
upstream.trivy.image.pullSecrets[0]¶
Type: string
"private-registry"
upstream.trivy.serviceAccountName¶
Type: string
""
upstream.trivy.automountServiceAccountToken¶
Type: bool
false
upstream.trivy.replicas¶
Type: int
1
upstream.trivy.resources.requests.cpu¶
Type: string
"200m"
upstream.trivy.resources.requests.memory¶
Type: string
"512Mi"
upstream.trivy.resources.limits.cpu¶
Type: int
1
upstream.trivy.resources.limits.memory¶
Type: string
"1Gi"
upstream.database.maxIdleConns¶
Type: string
"100"
upstream.database.maxOpenConns¶
Type: string
"1000"
upstream.database.type¶
Type: string
"external"
upstream.database.internal.image.repository¶
Type: string
"goharbor/harbor-db"
upstream.database.internal.image.tag¶
Type: string
"v2.14.1"
upstream.database.internal.serviceAccountName¶
Type: string
""
upstream.database.internal.automountServiceAccountToken¶
Type: bool
false
upstream.database.internal.password¶
Type: string
"changeit"
upstream.database.internal.shmSizeLimit¶
Type: string
"512Mi"
upstream.database.internal.resources.requests.memory¶
Type: string
"256Mi"
upstream.database.internal.resources.requests.cpu¶
Type: string
"100m"
upstream.database.internal.resources.limits.cpu¶
Type: string
"100m"
upstream.database.internal.resources.limits.memory¶
Type: string
"256Mi"
upstream.database.internal.initContainer.migrator¶
Type: object
{}
upstream.database.internal.initContainer.resources.requests.memory¶
Type: string
"128Mi"
upstream.database.internal.initContainer.resources.requests.cpu¶
Type: string
"100m"
upstream.database.internal.initContainer.resources.limits.cpu¶
Type: string
"100m"
upstream.database.internal.initContainer.resources.limits.memory¶
Type: string
"128Mi"
upstream.database.internal.initContainer.permissions¶
Type: object
{}
upstream.database.external.host¶
Type: string
"harbor-postgresql"
upstream.database.external.port¶
Type: string
"5432"
upstream.database.external.username¶
Type: string
"harborUser"
upstream.database.external.password¶
Type: string
"harborPW"
upstream.database.external.coreDatabase¶
Type: string
"harborUser"
upstream.redis.type¶
Type: string
"external"
upstream.redis.internal.image.repository¶
Type: string
"goharbor/redis-photon"
upstream.redis.internal.image.tag¶
Type: string
"v2.14.1"
upstream.redis.internal.image.pullSecrets[0]¶
Type: string
"private-registry"
upstream.redis.internal.serviceAccountName¶
Type: string
""
upstream.redis.internal.automountServiceAccountToken¶
Type: bool
false
upstream.redis.internal.resources.requests.memory¶
Type: string
"256Mi"
upstream.redis.internal.resources.requests.cpu¶
Type: string
"100m"
upstream.redis.internal.resources.limits.memory¶
Type: string
"256Mi"
upstream.redis.internal.resources.limits.cpu¶
Type: string
"100m"
upstream.redis.external.addr¶
Type: string
"redis-bb-master:6379"
upstream.exporter.image.repository¶
Type: string
"registry1.dso.mil/ironbank/opensource/goharbor/harbor-exporter"
upstream.exporter.image.tag¶
Type: string
"v2.15.2"
upstream.exporter.image.pullSecrets[0]¶
Type: string
"private-registry"
upstream.exporter.serviceAccountName¶
Type: string
""
upstream.exporter.automountServiceAccountToken¶
Type: bool
false
upstream.exporter.replicas¶
Type: int
1
upstream.exporter.revisionHistoryLimit¶
Type: int
10
upstream.exporter.resources.requests.memory¶
Type: string
"256Mi"
upstream.exporter.resources.requests.cpu¶
Type: string
"100m"
upstream.exporter.resources.limits.cpu¶
Type: string
"100m"
upstream.exporter.resources.limits.memory¶
Type: string
"256Mi"