expose:
  type: ingress
  tls:
    enabled: false
  ingress:
    hosts:
      core: hub.ywtest.wodcloud.com 
      notary: notary.ywtest.wodcloud.com
    controller: default
    annotations:
      ingress.kubernetes.io/ssl-redirect: "true"
      ingress.kubernetes.io/proxy-body-size: "0"
      nginx.ingress.kubernetes.io/ssl-redirect: "true"
      nginx.ingress.kubernetes.io/proxy-body-size: "0"
  clusterIP:
    name: harbor
    ports:
      httpPort: 80
      httpsPort: 443
      notaryPort: 4443

externalURL: https://hub.ywtest.wodcloud.com

internalTLS:
  enabled: false

persistence:
  enabled: false
  # Define which storage backend is used for registry and chartmuseum to store
  imageChartStorage:
    disableredirect: false
    type: filesystem
    filesystem:
      rootdirectory: /data
      #maxthreads: 100

imagePullPolicy: IfNotPresent

updateStrategy:
  type: RollingUpdate
logLevel: info

harborAdminPassword: "spaceIN511"
secretKey: "not-a-secure-key"

proxy:
  httpProxy:
  httpsProxy:
  noProxy: 127.0.0.1,localhost,.local,.internal
  components:
    - core
    - jobservice
    - clair
    - trivy

portal:
  image:
    repository: reg.local:5000/wod/harbor-portal
    tag: v2.1.0
  replicas: 1

core:
  image:
    repository: reg.local:5000/wod/harbor-core
    tag: v2.1.0
  replicas: 1
  startupProbe:
    initialDelaySeconds: 10

jobservice:
  image:
    repository: reg.local:5000/wod/harbor-jobservice
    tag: v2.1.0
  replicas: 1
  maxJobWorkers: 10
  jobLogger: file
  nodeSelector: 
    harbor: enabled

registry:
  registry:
    image:
      repository: reg.local:5000/wod/registry-photon
      tag: v2.1.0
  controller:
    image:
      repository: reg.local:5000/wod/harbor-registryctl
      tag: v2.1.0
  replicas: 1
  nodeSelector: 
    harbor: enabled
  storageSpec:
    # type: emptyDir , hostPath , volumeClaimTemplate
    type: hostPath
    emptyDir: {}
    hostPath:
      root: /data
    volumeClaimTemplate:
      spec:
        storageClassName: rook-ceph-block
        accessModes: ["ReadWriteOnce"]
        resources:
          requests:
            storage: 100Gi
      selector: {}
  relativeurls: false
  credentials:
    username: "harbor_registry_user"
    password: "harbor_registry_password"
    htpasswd: "harbor_registry_user:$2y$10$9L4Tc0DJbFFMB6RdSCunrOpTHdwhid4ktBJmLD00bYgqkkGOvll3m"
  middleware:
    enabled: false

chartmuseum:
  enabled: true
  absoluteUrl: false
  image:
    repository: reg.local:5000/wod/chartmuseum-photon
    tag: v2.1.0
  replicas: 1
  nodeSelector: 
    harbor: enabled
  storageSpec:
    type: hostPath
    emptyDir: {}
    hostPath:
      root: /data

clair:
  enabled: true
  clair:
    image:
      repository: reg.local:5000/wod/clair-photon
      tag: v2.1.0
  adapter:
    image:
      repository: reg.local:5000/wod/clair-adapter-photon
      tag: v2.1.0
  replicas: 1
  updatersInterval: 12
  nodeSelector: 
    harbor: enabled


trivy:
  enabled: true
  image:
    repository: reg.local:5000/wod/trivy-adapter-photon
    tag: v2.1.0
  replicas: 1
  debugMode: false
  vulnType: "os,library"
  severity: "UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL"
  ignoreUnfixed: false
  insecure: false
  skipUpdate: false
  resources:
    requests:
      cpu: 200m
      memory: 512Mi
    limits:
      cpu: 1
      memory: 1Gi

notary:
  enabled: true
  server:
    image:
      repository: reg.local:5000/wod/notary-server-photon
      tag: v2.1.0
    replicas: 1
  signer:
    image:
      repository: reg.local:5000/wod/notary-signer-photon
      tag: v2.1.0
    replicas: 1

database:
# if external database is used, set "type" to "external" and fill the connection informations in "external" section
  type: internal
  internal:
    serviceAccountName: ""
    image:
      repository: reg.local:5000/wod/harbor-db
      tag: v2.1.0
    password: "spaceIN511"
    resources:
      limits:
        memory: 4Gi
      requests:
        memory: 256Mi
    nodeSelector:
      harbor: enabled
    storageSpec:
      type: hostPath
      emptyDir: {}
      hostPath:
        root: /data
      volumeClaimTemplate:
        spec:
          storageClassName: rook-ceph-block
          accessModes: ["ReadWriteOnce"]
          resources:
            requests:
              storage: 20Gi
        selector: {}
  external:
    host: "harbor-harbor-database.devops"
    port: "5432"
    username: "postgres"
    password: "spaceIN511"
    coreDatabase: "registry"
    clairDatabase: "clair"
    notaryServerDatabase: "notary_server"
    notarySignerDatabase: "notary_signer"

redis:
  type: internal
  internal:
    image:
      repository: reg.local:5000/wod/redis-photon
      tag: v2.1.0