Add Harbor application resources including HelmRelease, HTTPRoute, PVC, and Namespace

Author: ams0

ToDeploy.md

@@ -12,8 +12,8 @@
 - [ ] Nextcloud
 - [ ] Keycloak theme
 - [X] Openclaw
-- [ ] Coder https://github.com/Azure-Samples/aks-kueue-sample/blob/main/coder/
-- [ ] https://github.com/open-webui/helm-charts or https://www.librechat.ai
+- [X] Coder https://github.com/Azure-Samples/aks-kueue-sample/blob/main/coder/
+- [X] https://github.com/open-webui/helm-charts or https://www.librechat.ai
 - [ ] Grafana/Prometheus
 - [X] Forgejo 
 - [X] Mailer and runners for ForgeJo

gitops/apps/harbor/harbor-helmrelease.yaml

@@ -0,0 +1,36 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: harbor
+  namespace: flux-system
+  labels:
+    app: harbor
+spec:
+  interval: 10m
+  timeout: 5m
+  targetNamespace: harbor
+  chart:
+    spec:
+      chart: harbor
+      sourceRef:
+        kind: HelmRepository
+        name: harbor
+        namespace: flux-system
+      interval: 5m0s
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    externalURL: "https://registry.vps.kubespaces.cloud"  # Change this to your actual domain
+    expose:
+      type: clusterIP
+    persistence:
+      enabled: true
+      persistentVolumeClaim:
+        registry:
+          existingClaim: harbor-pvc

gitops/apps/harbor/harbor-helmrepo.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: harbor
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://helm.goharbor.io

gitops/apps/harbor/harbor-httproute.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: harbor
+  namespace: harbor
+spec:
+  parentRefs:
+    - name: gateway
+      namespace: istio-system
+      sectionName: http   # listener name on the Gateway
+  hostnames:
+    - "registry.vps.kubespaces.cloud"  # Change this to your actual domain
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: harbor
+          port: 18789

gitops/apps/harbor/harbor-pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: harbor-pvc
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi

gitops/apps/harbor/kustomization.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - harbor-pvc.yaml
+  - harbor-helmrepo.yaml
+  - harbor-helmrelease.yaml
+  - harbor-httproute.yaml

gitops/apps/harbor/namespace.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: harbor
+  labels:
+    name: harbor

ingress/traefik/dynamic.yml

@@ -16,7 +16,7 @@ http:
   routers:
     # HTTPS routers for all domains
     backend:
-      rule: "Host(`coder.vps.kubespaces.cloud`) || Host(`chat.vps.kubespaces.cloud`) || Host(`talks.vps.kubespaces.cloud`) || Host(`next.vps.kubespaces.cloud`) || Host(`wiki.vps.kubespaces.cloud`) || Host(`claw.vps.kubespaces.cloud`) || Host(`supabase.vps.kubespaces.cloud`) || Host(`auth.vps.kubespaces.cloud`) || Host(`actual.vps.kubespaces.cloud`) || Host(`nginx.vps.kubespaces.cloud`) || Host(`registry.vps.kubespaces.cloud`) || Host(`grafana.vps.kubespaces.cloud`) || Host(`dash.vps.kubespaces.cloud`) || Host(`n8n.vps.kubespaces.cloud`) || Host(`s3.vps.kubespaces.cloud`) || Host(`code.vps.kubespaces.cloud`) || Host(`minecraft.vps.kubespaces.cloud`) || Host(`echo.vps.kubespaces.cloud`) || Host(`webhook.vps.kubespaces.cloud`) || Host(`helix.vps.kubespaces.cloud`) || Host(`rancher.vps.kubespaces.cloud`)"
+      rule: "Host(`registry.vps.kubespaces.cloud`) || Host(`coder.vps.kubespaces.cloud`) || Host(`chat.vps.kubespaces.cloud`) || Host(`talks.vps.kubespaces.cloud`) || Host(`next.vps.kubespaces.cloud`) || Host(`wiki.vps.kubespaces.cloud`) || Host(`claw.vps.kubespaces.cloud`) || Host(`supabase.vps.kubespaces.cloud`) || Host(`auth.vps.kubespaces.cloud`) || Host(`actual.vps.kubespaces.cloud`) || Host(`nginx.vps.kubespaces.cloud`) || Host(`registry.vps.kubespaces.cloud`) || Host(`grafana.vps.kubespaces.cloud`) || Host(`dash.vps.kubespaces.cloud`) || Host(`n8n.vps.kubespaces.cloud`) || Host(`s3.vps.kubespaces.cloud`) || Host(`code.vps.kubespaces.cloud`) || Host(`minecraft.vps.kubespaces.cloud`) || Host(`echo.vps.kubespaces.cloud`) || Host(`webhook.vps.kubespaces.cloud`) || Host(`helix.vps.kubespaces.cloud`) || Host(`rancher.vps.kubespaces.cloud`)"
       entryPoints:
         - websecure
       service: backend-service