Delete commit history along with sensitive data

services/Harbor/chart-values.yml

@@ -0,0 +1,42 @@
+expose:
+  ingress:
+    hosts:
+      core: registry.spamasaurus.com
+      notary: notary.spamasaurus.com
+
+externalURL: https://registry.spamasaurus.com
+
+persistence:
+  enabled: true
+  resourcePolicy: "keep"
+  persistentVolumeClaim:
+    registry:
+      existingClaim: "flexvolsmb-harbor-registry"
+      storageClass: "-"
+      accessMode: ReadWriteMany
+      size: 5Gi
+    chartmuseum:
+      existingClaim: "flexvolsmb-harbor-chartmuseum"
+      storageClass: "-"
+      accessMode: ReadWriteMany
+      size: 5Gi
+    jobservice:
+      existingClaim: "flexvolsmb-harbor-jobservice"
+      storageClass: "-"
+      accessMode: ReadWriteMany
+      size: 1Gi
+    database:
+      existingClaim: "flexvolsmb-harbor-database"
+      storageClass: "-"
+      accessMode: ReadWriteMany
+      size: 1Gi
+    redis:
+      existingClaim: "flexvolsmb-harbor-redis"
+      storageClass: "-"
+      accessMode: ReadWriteMany
+      size: 1Gi
+    trivy:
+      existingClaim: "flexvolsmb-harbor-trivy"
+      storageClass: "-"
+      accessMode: ReadWriteMany
+      size: 1Gi

services/Harbor/ingressRoute-Harbor.yml

@@ -0,0 +1,33 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: harbor
+  namespace: harbor
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`registry.spamasaurus.com`)
+    kind: Rule
+    services:
+    - name: harbor-harbor-portal
+      namespace: harbor
+      port: 80
+    middlewares:
+      - name: security-headers@file
+  - match: Host(`registry.spamasaurus.com`) && PathPrefix(`/api/`, `/service/`, `/v2/`, `/chartrepo/`, `/c/`)
+    kind: Rule
+    services:
+    - name: harbor-harbor-core
+      namespace: harbor
+      port: 80
+    middlewares:
+      - name: security-headers@file
+  - match: Host(`notary.spamasaurus.com`)
+    kind: Rule
+    services:
+    - name: harbor-harbor-notary-server
+      namespace: harbor
+      port: 4443
+    middlewares:
+      - name: security-headers@file

services/Harbor/persistentVolumeClaim_Harbor.yml

@@ -0,0 +1,204 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-harbor-chartmuseum
+  namespace: harbor
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-chartmuseum
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+      namespace: default
+    options:
+      opts: domain=bessems.eu,file_mode=0700,dir_mode=0700,uid=999,gid=999,iocharset=utf8,nobrl
+      server: 192.168.11.225
+      share: /K3s.Volumes/harbor/chartmuseum
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-harbor-chartmuseum
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-chartmuseum
+  resources:
+    requests:
+      storage: 10Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-harbor-database
+  namespace: harbor
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-database
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+      namespace: default
+    options:
+      opts: domain=bessems.eu,file_mode=0700,dir_mode=0700,uid=999,gid=999,iocharset=utf8,nobrl
+      server: 192.168.11.225
+      share: /K3s.Volumes/harbor/database
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-harbor-database
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-database
+  resources:
+    requests:
+      storage: 10Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-harbor-jobservice
+  namespace: harbor
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-jobservice
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+      namespace: default
+    options:
+      opts: domain=bessems.eu,file_mode=0700,dir_mode=0700,uid=10000,gid=10000,iocharset=utf8,nobrl
+      server: 192.168.11.225
+      share: /K3s.Volumes/harbor/jobservice
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-harbor-jobservice
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-jobservice
+  resources:
+    requests:
+      storage: 10Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-harbor-redis
+  namespace: harbor
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-redis
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+      namespace: default
+    options:
+      opts: domain=bessems.eu,file_mode=0700,dir_mode=0700,iocharset=utf8,nobrl
+      server: 192.168.11.225
+      share: /K3s.Volumes/harbor/redis
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-harbor-redis
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-redis
+  resources:
+    requests:
+      storage: 10Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-harbor-registry
+  namespace: harbor
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-registry
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+      namespace: default
+    options:
+      opts: domain=bessems.eu,file_mode=0700,dir_mode=0700,uid=10000,gid=10000,iocharset=utf8,nobrl
+      server: 192.168.11.225
+      share: /K3s.Volumes/harbor/registry
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-harbor-registry
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-registry
+  resources:
+    requests:
+      storage: 10Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: flexvolsmb-harbor-trivy
+  namespace: harbor
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-trivy
+  flexVolume:
+    driver: mount/smb
+    secretRef:
+      name: smb-secret
+      namespace: default
+    options:
+      opts: domain=bessems.eu,file_mode=0700,dir_mode=0700,uid=10000,gid=10000,iocharset=utf8,nobrl
+      server: 192.168.11.225
+      share: /K3s.Volumes/harbor/trivy
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: flexvolsmb-harbor-trivy
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: flexvolsmb-harbor-trivy
+  resources:
+    requests:
+      storage: 10Gi
+