This commit is contained in:
marsal wang
2021-12-23 23:28:06 +08:00
parent 7161207a0c
commit d4a09594d2
8 changed files with 12928 additions and 6 deletions

View File

@ -1,11 +1,23 @@
nfs 安装
## nfs 安装
helm upgrade -i nfs-client-provisioner-201 nfs-subdir-external-provisioner/ --values local-values/201-nfs-client-provisioner-values.yaml
helm upgrade -i nfs-client-provisioner-207 nfs-subdir-external-provisioner/ --values local-values/207-nfs-client-provisioner-values.yaml
helm upgrade -i nfs-client-provisioner-208 nfs-subdir-external-provisioner/ --values local-values/208-nfs-client-provisioner-values.yaml
helm upgrade -i nfs-client-provisioner-209 nfs-subdir-external-provisioner/ --values local-values/209-nfs-client-provisioner-values.yaml
用于分布式存储
文档地址 https://www.yuque.com/marsal/zq3vzw/ghd64r#zPYDc
helm 包路径: ./nfs-subdir-external-provisioner
git地址https://hub.fastgit.org/kubernetes-sigs/nfs-subdir-external-provisioner/charts/nfs-subdir-external-provisioner
helm安装命令
```
helm upgrade -i nfs-client-provisioner-201 nfs-subdir-external-provisioner/ --values local-values/nfs/201.yaml
helm upgrade -i nfs-client-provisioner-207 nfs-subdir-external-provisioner/ --values local-values/nfs/207.yaml
helm upgrade -i nfs-client-provisioner-208 nfs-subdir-external-provisioner/ --values local-values/nfs/208.yaml
helm upgrade -i nfs-client-provisioner-209 nfs-subdir-external-provisioner/ --values local-values/nfs/209.yaml
```
## bitnami charts包合集
地址: https://hub.fastgit.org/bitnami/charts
kubectl patch pvc harbor-redis -n harbor -p '{“metadata”:{“finalizers”:null}}'

View File

@ -0,0 +1,342 @@
expose:
type: ingress
tls:
enabled: true
secretName: sino-assist-ssl-key
notarySecretName: sino-assist-ssl-key
commonName: ''
ingress:
hosts:
core: harbor.sino-assist.com
notary: notary.harbor.sino-assist.com
controller: default
annotations:
ingress.kubernetes.io/ssl-redirect: 'true'
ingress.kubernetes.io/proxy-body-size: '0'
nginx.ingress.kubernetes.io/ssl-redirect: 'true'
nginx.ingress.kubernetes.io/proxy-body-size: '0'
clusterIP:
name: harbor
ports:
httpPort: 80
httpsPort: 443
notaryPort: 4443
nodePort:
name: harbor
ports:
http:
port: 80
nodePort: 30002
https:
port: 443
nodePort: 30003
notary:
port: 4443
nodePort: 30004
loadBalancer:
name: harbor
IP: ''
ports:
httpPort: 80
httpsPort: 443
notaryPort: 4443
annotations: {}
sourceRanges: []
externalURL: 'https://harbor.sino-assist.com'
internalTLS:
enabled: false
certSource: auto
trustCa: ''
core:
secretName: ''
crt: ''
key: ''
jobservice:
secretName: ''
crt: ''
key: ''
registry:
secretName: ''
crt: ''
key: ''
portal:
secretName: ''
crt: ''
key: ''
chartmuseum:
secretName: ''
crt: ''
key: ''
clair:
secretName: ''
crt: ''
key: ''
trivy:
secretName: ''
crt: ''
key: ''
persistence:
enabled: true
resourcePolicy: keep
persistentVolumeClaim:
registry:
existingClaim: harbor-registry
storageClass: ''
subPath: ''
accessMode: ReadWriteMany
size: 5Gi
chartmuseum:
existingClaim: harbor-chartmuseum
storageClass: ''
subPath: ''
accessMode: ReadWriteMany
size: 5Gi
jobservice:
existingClaim: harbor-jobservice
storageClass: ''
subPath: ''
accessMode: ReadWriteMany
size: 1Gi
database:
existingClaim: harbor-database
storageClass: ''
subPath: ''
accessMode: ReadWriteMany
size: 1Gi
redis:
existingClaim: harbor-redis
storageClass: ''
subPath: ''
accessMode: ReadWriteMany
size: 1Gi
trivy:
existingClaim: harbor-trivy
storageClass: ''
subPath: ''
accessMode: ReadWriteMany
size: 5Gi
imageChartStorage:
disableredirect: false
type: filesystem
filesystem:
rootdirectory: /storage
azure:
accountname: accountname
accountkey: base64encodedaccountkey
container: containername
gcs:
bucket: bucketname
encodedkey: base64-encoded-json-key-file
s3:
region: us-west-1
bucket: bucketname
swift:
authurl: 'https://storage.myprovider.com/v3/auth'
username: username
password: password
container: containername
oss:
accesskeyid: accesskeyid
accesskeysecret: accesskeysecret
region: regionname
bucket: bucketname
imagePullPolicy: IfNotPresent
imagePullSecrets: null
updateStrategy:
type: RollingUpdate
logLevel: info
harborAdminPassword: Harbor12345
secretKey: not-a-secure-key
proxy:
httpProxy: null
httpsProxy: null
noProxy: '127.0.0.1,localhost,.local,.internal'
components:
- core
- jobservice
- clair
nginx:
image:
repository: goharbor/nginx-photon
tag: v2.0.0
replicas: 1
nodeSelector: {}
tolerations: []
affinity: {}
podAnnotations: {}
portal:
image:
repository: goharbor/harbor-portal
tag: v2.0.0
replicas: 1
nodeSelector: {}
tolerations: []
affinity: {}
podAnnotations: {}
core:
image:
repository: goharbor/harbor-core
tag: v2.0.0
replicas: 1
livenessProbe:
initialDelaySeconds: 300
nodeSelector: {}
tolerations: []
affinity: {}
podAnnotations: {}
secret: ''
secretName: ''
xsrfKey: ''
jobservice:
image:
repository: goharbor/harbor-jobservice
tag: v2.0.0
replicas: 1
maxJobWorkers: 10
jobLogger: file
nodeSelector: {}
tolerations: []
affinity: {}
podAnnotations: {}
secret: ''
registry:
registry:
image:
repository: goharbor/registry-photon
tag: v2.0.0
controller:
image:
repository: goharbor/harbor-registryctl
tag: v2.0.0
replicas: 1
nodeSelector: {}
tolerations: []
affinity: {}
podAnnotations: {}
secret: ''
relativeurls: false
credentials:
username: harbor_registry_user
password: harbor_registry_password
htpasswd: >-
harbor_registry_user:$2y$10$9L4Tc0DJbFFMB6RdSCunrOpTHdwhid4ktBJmLD00bYgqkkGOvll3m
middleware:
enabled: false
type: cloudFront
cloudFront:
baseurl: example.cloudfront.net
keypairid: KEYPAIRID
duration: 3000s
ipfilteredby: none
privateKeySecret: my-secret
chartmuseum:
enabled: true
absoluteUrl: false
image:
repository: goharbor/chartmuseum-photon
tag: v2.0.0
replicas: 1
nodeSelector: {}
tolerations: []
affinity: {}
podAnnotations: {}
clair:
enabled: true
clair:
image:
repository: goharbor/clair-photon
tag: v2.0.0
adapter:
image:
repository: goharbor/clair-adapter-photon
tag: v2.0.0
replicas: 1
updatersInterval: 12
nodeSelector: {}
tolerations: []
affinity: {}
podAnnotations: {}
trivy:
enabled: true
image:
repository: goharbor/trivy-adapter-photon
tag: v2.0.0
replicas: 1
debugMode: false
vulnType: 'os,library'
severity: 'UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL'
ignoreUnfixed: false
insecure: false
gitHubToken: ''
skipUpdate: false
resources:
requests:
cpu: 200m
memory: 512Mi
limits:
cpu: 1
memory: 1Gi
podAnnotations: {}
notary:
enabled: true
server:
image:
repository: goharbor/notary-server-photon
tag: v2.0.0
replicas: 1
signer:
image:
repository: goharbor/notary-signer-photon
tag: v2.0.0
replicas: 1
nodeSelector: {}
tolerations: []
affinity: {}
podAnnotations: {}
secretName: ''
database:
type: internal
internal:
image:
repository: goharbor/harbor-db
tag: v2.0.0
initContainerImage:
repository: busybox
tag: latest
password: changeit
nodeSelector: {}
tolerations: []
affinity: {}
external:
host: 192.168.0.1
port: '5432'
username: user
password: password
coreDatabase: registry
clairDatabase: clair
notaryServerDatabase: notary_server
notarySignerDatabase: notary_signer
sslmode: disable
maxIdleConns: 50
maxOpenConns: 100
podAnnotations: {}
redis:
type: internal
internal:
image:
repository: goharbor/redis-photon
tag: v2.0.0
nodeSelector: {}
tolerations: []
affinity: {}
external:
host: 192.168.0.2
port: '6379'
coreDatabaseIndex: '0'
jobserviceDatabaseIndex: '1'
registryDatabaseIndex: '2'
chartmuseumDatabaseIndex: '3'
clairAdapterIndex: '4'
trivyAdapterIndex: '5'
password: ''
podAnnotations: {}

1021
local-values/mysql/crm1.yaml Normal file

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff