From 0064c351c4f26a562031743be05e508165e1c018 Mon Sep 17 00:00:00 2001 From: Alberto Alejandro Larios Manzano Date: Mon, 1 Dec 2025 23:24:26 -0600 Subject: [PATCH 1/4] SBX - Added Harbor App --- ionos_sbx/harbor/Chart.yaml | 7 +++ ionos_sbx/harbor/README.md | 11 ++++ .../templates/postgres-sealed-secret.yaml | 12 +++++ ionos_sbx/harbor/values.yaml | 52 +++++++++++++++++++ 4 files changed, 82 insertions(+) create mode 100644 ionos_sbx/harbor/Chart.yaml create mode 100644 ionos_sbx/harbor/README.md create mode 100644 ionos_sbx/harbor/templates/postgres-sealed-secret.yaml create mode 100644 ionos_sbx/harbor/values.yaml diff --git a/ionos_sbx/harbor/Chart.yaml b/ionos_sbx/harbor/Chart.yaml new file mode 100644 index 000000000..d71349068 --- /dev/null +++ b/ionos_sbx/harbor/Chart.yaml @@ -0,0 +1,7 @@ +apiVersion: v2 +name: harbor +description: Chart holder for harbor + +type: application +version: 0.1.0 +appVersion: "2.14" \ No newline at end of file diff --git a/ionos_sbx/harbor/README.md b/ionos_sbx/harbor/README.md new file mode 100644 index 000000000..b0e37b248 --- /dev/null +++ b/ionos_sbx/harbor/README.md @@ -0,0 +1,11 @@ + +# Harbor + +Harbor is an open source registry that secures artifacts with policies and role-based access control, ensures images are scanned and free from vulnerabilities, and signs images as trusted. + +```bash + helm repo add harbor https://helm.goharbor.io + helm repo update + kubectl create namespace harbor + helm upgrade --install -n harbor harbor/harbor -f values.yaml +``` \ No newline at end of file diff --git a/ionos_sbx/harbor/templates/postgres-sealed-secret.yaml b/ionos_sbx/harbor/templates/postgres-sealed-secret.yaml new file mode 100644 index 000000000..667378c96 --- /dev/null +++ b/ionos_sbx/harbor/templates/postgres-sealed-secret.yaml @@ -0,0 +1,12 @@ +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + name: harbor-db-secret + namespace: harbor-ns +spec: + encryptedData: + password: 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 + template: + metadata: + name: harbor-db-secret + namespace: harbor-ns \ No newline at end of file diff --git a/ionos_sbx/harbor/values.yaml b/ionos_sbx/harbor/values.yaml new file mode 100644 index 000000000..66eb3d690 --- /dev/null +++ b/ionos_sbx/harbor/values.yaml @@ -0,0 +1,52 @@ +logLevel: debug + +expose: + type: nodePort + tls: + enabled: false + +# Persistencia para componentes +persistence: + enabled: true + resourcePolicy: "keep" + persistentVolumeClaim: + registry: + size: 40Gi + jobservice: + size: 1Gi + database: + size: 1Gi + redis: + size: 1Gi + trivy: + size: 5Gi + +# Base de datos externa +database: + type: external + external: + host: pg-75qkrjg6i4d7tlg2.postgresql.de-txl.ionos.com + port: 5432 + username: harboruser + coreDatabase: harbordb + existingSecret: harbor-db-secret + existingSecretPasswordKey: password + sslmode: require + +redis: + type: internal + +trivy: + enabled: true + +chartmesum: + enabled: true + +core: + replicaCount: 1 + +jobservice: + replicaCount: 1 + +registry: + replicaCount: 1 \ No newline at end of file From 1016e1dc378427aea942ca33b24e1c0c437e1de7 Mon Sep 17 00:00:00 2001 From: Alberto Alejandro Larios Manzano Date: Mon, 1 Dec 2025 23:39:26 -0600 Subject: [PATCH 2/4] Revert "SBX - Added Harbor App" This reverts commit 0064c351c4f26a562031743be05e508165e1c018. --- ionos_sbx/harbor/Chart.yaml | 7 --- ionos_sbx/harbor/README.md | 11 ---- .../templates/postgres-sealed-secret.yaml | 12 ----- ionos_sbx/harbor/values.yaml | 52 ------------------- 4 files changed, 82 deletions(-) delete mode 100644 ionos_sbx/harbor/Chart.yaml delete mode 100644 ionos_sbx/harbor/README.md delete mode 100644 ionos_sbx/harbor/templates/postgres-sealed-secret.yaml delete mode 100644 ionos_sbx/harbor/values.yaml diff --git a/ionos_sbx/harbor/Chart.yaml b/ionos_sbx/harbor/Chart.yaml deleted file mode 100644 index d71349068..000000000 --- a/ionos_sbx/harbor/Chart.yaml +++ /dev/null @@ -1,7 +0,0 @@ -apiVersion: v2 -name: harbor -description: Chart holder for harbor - -type: application -version: 0.1.0 -appVersion: "2.14" \ No newline at end of file diff --git a/ionos_sbx/harbor/README.md b/ionos_sbx/harbor/README.md deleted file mode 100644 index b0e37b248..000000000 --- a/ionos_sbx/harbor/README.md +++ /dev/null @@ -1,11 +0,0 @@ - -# Harbor - -Harbor is an open source registry that secures artifacts with policies and role-based access control, ensures images are scanned and free from vulnerabilities, and signs images as trusted. - -```bash - helm repo add harbor https://helm.goharbor.io - helm repo update - kubectl create namespace harbor - helm upgrade --install -n harbor harbor/harbor -f values.yaml -``` \ No newline at end of file diff --git a/ionos_sbx/harbor/templates/postgres-sealed-secret.yaml b/ionos_sbx/harbor/templates/postgres-sealed-secret.yaml deleted file mode 100644 index 667378c96..000000000 --- a/ionos_sbx/harbor/templates/postgres-sealed-secret.yaml +++ /dev/null @@ -1,12 +0,0 @@ -apiVersion: bitnami.com/v1alpha1 -kind: SealedSecret -metadata: - name: harbor-db-secret - namespace: harbor-ns -spec: - encryptedData: - password: AgBE1muqB96gBtmNmerdNppA/7X5RA0QALKyKHcU0OnqSMxGIHzPO6/IM9qBK4kCabQ7u4TNKVZbpZarxvyrBBcrxAEkyaWYOYjYWC6XenAWlwIhYtDQA7ilthDA0VuCqedekhX3LvRm+9E03FfS1ooIVXwRVMUnhyniqp0LoOyCUBInQ7PUdK6sRUUyCO5+iek8pxh7l8xw9zrSh+SuT1YCFfB7nGAPRDvMA9nAr83KVdwp4a72Vv3ou2tfNRw/aayNbzau0mZ9jmk035mlvI0M1ysfGRSILDary5Q3OS/mtHsOwIXEghTQtdkGbdr4YFmF5I8jrxa3MFd8vZ/yZQhP5rhE8cGLjgiYo5Gdj9g8sJSWW/zjndJtlduIfm8klXmdQW0KsZLxXvIBzdo4qg5YXIL8419PYaIu26JJul1SG32JuD3C+HYkvO+F2aWkEWrN+/DDugxMEJooG4csx31HhbRqBxjpKq4acYrjz1bvag7BkesxJoIe33e2X9fjNvnqYfF3yfwSwjHNM5YtzgQyrQDbrTxa8AU67n7Gsjb7pTnipDH9c/RqKYAi+59kqTKibgmrnKt6OWH3hRkbhEmAaY5A0SMFdlQN1qVc7xVeOE2hVfxzmO7/JgOzoZzUx7qFF3j7Xn67zqTwjgNO7WSqVj/QOzS7jVe4FbfkQYsBC2fo4x6dbPvgBbNmxhuii6JmQlJd9nxVo/EU - template: - metadata: - name: harbor-db-secret - namespace: harbor-ns \ No newline at end of file diff --git a/ionos_sbx/harbor/values.yaml b/ionos_sbx/harbor/values.yaml deleted file mode 100644 index 66eb3d690..000000000 --- a/ionos_sbx/harbor/values.yaml +++ /dev/null @@ -1,52 +0,0 @@ -logLevel: debug - -expose: - type: nodePort - tls: - enabled: false - -# Persistencia para componentes -persistence: - enabled: true - resourcePolicy: "keep" - persistentVolumeClaim: - registry: - size: 40Gi - jobservice: - size: 1Gi - database: - size: 1Gi - redis: - size: 1Gi - trivy: - size: 5Gi - -# Base de datos externa -database: - type: external - external: - host: pg-75qkrjg6i4d7tlg2.postgresql.de-txl.ionos.com - port: 5432 - username: harboruser - coreDatabase: harbordb - existingSecret: harbor-db-secret - existingSecretPasswordKey: password - sslmode: require - -redis: - type: internal - -trivy: - enabled: true - -chartmesum: - enabled: true - -core: - replicaCount: 1 - -jobservice: - replicaCount: 1 - -registry: - replicaCount: 1 \ No newline at end of file From 89aa73f28dba27f828d89ef3c034efe23667f863 Mon Sep 17 00:00:00 2001 From: Alberto Alejandro Larios Manzano Date: Mon, 1 Dec 2025 23:43:48 -0600 Subject: [PATCH 3/4] SBX - Added Harbor App --- ionos_sbx/harbor/Chart.yaml | 7 +++ ionos_sbx/harbor/README.md | 11 ++++ .../templates/postgres-sealed-secret.yaml | 12 +++++ ionos_sbx/harbor/values.yaml | 52 +++++++++++++++++++ 4 files changed, 82 insertions(+) create mode 100644 ionos_sbx/harbor/Chart.yaml create mode 100644 ionos_sbx/harbor/README.md create mode 100644 ionos_sbx/harbor/templates/postgres-sealed-secret.yaml create mode 100644 ionos_sbx/harbor/values.yaml diff --git a/ionos_sbx/harbor/Chart.yaml b/ionos_sbx/harbor/Chart.yaml new file mode 100644 index 000000000..d71349068 --- /dev/null +++ b/ionos_sbx/harbor/Chart.yaml @@ -0,0 +1,7 @@ +apiVersion: v2 +name: harbor +description: Chart holder for harbor + +type: application +version: 0.1.0 +appVersion: "2.14" \ No newline at end of file diff --git a/ionos_sbx/harbor/README.md b/ionos_sbx/harbor/README.md new file mode 100644 index 000000000..b0e37b248 --- /dev/null +++ b/ionos_sbx/harbor/README.md @@ -0,0 +1,11 @@ + +# Harbor + +Harbor is an open source registry that secures artifacts with policies and role-based access control, ensures images are scanned and free from vulnerabilities, and signs images as trusted. + +```bash + helm repo add harbor https://helm.goharbor.io + helm repo update + kubectl create namespace harbor + helm upgrade --install -n harbor harbor/harbor -f values.yaml +``` \ No newline at end of file diff --git a/ionos_sbx/harbor/templates/postgres-sealed-secret.yaml b/ionos_sbx/harbor/templates/postgres-sealed-secret.yaml new file mode 100644 index 000000000..667378c96 --- /dev/null +++ b/ionos_sbx/harbor/templates/postgres-sealed-secret.yaml @@ -0,0 +1,12 @@ +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + name: harbor-db-secret + namespace: harbor-ns +spec: + encryptedData: + password: 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 + template: + metadata: + name: harbor-db-secret + namespace: harbor-ns \ No newline at end of file diff --git a/ionos_sbx/harbor/values.yaml b/ionos_sbx/harbor/values.yaml new file mode 100644 index 000000000..66eb3d690 --- /dev/null +++ b/ionos_sbx/harbor/values.yaml @@ -0,0 +1,52 @@ +logLevel: debug + +expose: + type: nodePort + tls: + enabled: false + +# Persistencia para componentes +persistence: + enabled: true + resourcePolicy: "keep" + persistentVolumeClaim: + registry: + size: 40Gi + jobservice: + size: 1Gi + database: + size: 1Gi + redis: + size: 1Gi + trivy: + size: 5Gi + +# Base de datos externa +database: + type: external + external: + host: pg-75qkrjg6i4d7tlg2.postgresql.de-txl.ionos.com + port: 5432 + username: harboruser + coreDatabase: harbordb + existingSecret: harbor-db-secret + existingSecretPasswordKey: password + sslmode: require + +redis: + type: internal + +trivy: + enabled: true + +chartmesum: + enabled: true + +core: + replicaCount: 1 + +jobservice: + replicaCount: 1 + +registry: + replicaCount: 1 \ No newline at end of file From 5e02c129e63294b4c413dd7b166ac6e19ad771ee Mon Sep 17 00:00:00 2001 From: Alberto Alejandro Larios Manzano Date: Fri, 5 Dec 2025 12:26:59 -0600 Subject: [PATCH 4/4] SBX - Added Harbor App in ArgoCD --- applications_sbx/infrastructure/harbor.yaml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 applications_sbx/infrastructure/harbor.yaml diff --git a/applications_sbx/infrastructure/harbor.yaml b/applications_sbx/infrastructure/harbor.yaml new file mode 100644 index 000000000..93ecbbeef --- /dev/null +++ b/applications_sbx/infrastructure/harbor.yaml @@ -0,0 +1,19 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: harbor + namespace: argocd + labels: + purpose: infra +spec: + destination: + server: https://kubernetes.default.svc + project: default + source: + path: ionos_sbx/harbor + repoURL: https://github.com/DOME-Marketplace/dome-gitops + targetRevision: HEAD + syncPolicy: + automated: + prune: true + selfHeal: true \ No newline at end of file