harbor helm

No introduction found. Create it?

Install

Install with:

helm repo add harbor https://helm.goharbor.io/
helm install harbor harbor/harbor -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 13)

NameRepoStarsVersionTimestamp
harborlarivierec/home-cluster1501.19.19 days ago
harborqjoly/GitOps1051.18.06 months ago
harborgandazgul/k8s-infrastructure521.16.2a year ago

Values

See the most popular values for this chart:

KeyTypes
externalURL (12)
https://registry.${SECRET_DOMAIN_2}
string
database.type (9)
external
string
database.external.host (8)
postgres17-rw.database.svc.cluster.local
string
database.external.username (7)
harbor
string
database.external.port (6)
5432
string, number
database.external.coreDatabase (5)
harbor
string
database.external.existingSecret (5)
harbor-secrets
string
database.external.maxIdleConns (1)
10
number
database.external.maxOpenConns (1)
50
number
database.external.password (1)
${HARBOR_POSTGRES_PASSWORD}
string
database.external.sslmode (1)
disable
string
database.maxIdleConns (2)
50
number
database.maxOpenConns (2)
100
number
database.internal.image.repository (1)
goharbor/harbor-db
string
database.internal.image.tag (1)
v2.14.1
string
expose.type (9)
ingress
string
expose.tls.certSource (6)
secret
string
expose.tls.secret.secretName (5)
harbor-tls
string
expose.tls.enabled (4)
false
boolean
expose.tls.auto.commonName (1)
harbor-tls
string
expose.ingress.hosts.core (5)
harbor.127.0.0.1.nip.io
string
expose.ingress.hosts.notary (1)
notary.harbor.crystalnet.org
string
expose.ingress.annotations."cert-manager.io/cluster-issuer" (4)
letsencrypt-production-internal
string
expose.ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (2)
0
string
expose.ingress.annotations."nginx.ingress.kubernetes.io/ssl-redirect" (2)
true
string
expose.ingress.annotations."external-dns.alpha.kubernetes.io/target" (1)
ingress.${SECRET_DOMAIN}
string
expose.ingress.annotations."external-dns.home.arpa/enabled" (1)
true
string
expose.ingress.annotations."forecastle.stakater.com/appName" (1)
Harbor
string
expose.ingress.annotations."forecastle.stakater.com/expose" (1)
true
string
expose.ingress.annotations."forecastle.stakater.com/group" (1)
DevOps
string
expose.ingress.annotations."forecastle.stakater.com/icon" (1)
https://raw.githubusercontent.com/cncf/artwork/refs/heads/main/projects/harbor/icon/color/harbor-icon-color.svg
string
expose.ingress.annotations."ingress.kubernetes.io/proxy-body-size" (1)
0
string
expose.ingress.annotations."ingress.kubernetes.io/ssl-redirect" (1)
true
string
expose.ingress.annotations."kubernetes.io/tls-acme" (1)
true
string
expose.ingress.annotations."nginx.ingress.kubernetes.io/custom-http-errors" (1)
418
string
expose.ingress.annotations."nginx.ingress.kubernetes.io/proxy-connect-timeout" (1)
480
string
expose.ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
expose.ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)
networking-ipwhitelist@kubernetescrd, networking-request-limit@kubernetescrd
string
expose.ingress.className (3)
traefik-internal
string
expose.ingress.controller (1)
default
string
expose.route.hosts[] (3)
- registry.${SECRET_DOMAIN_2}
string
expose.route.parentRefs[].name (3)
envoy
string
expose.route.parentRefs[].namespace (3)
networking
string
expose.route.parentRefs[].group (2)
gateway.networking.k8s.io
string
expose.route.parentRefs[].kind (2)
Gateway
string
expose.route.parentRefs[].sectionName (2)
https
string
expose.route.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (2)
false
string
expose.route.annotations."external-dns.alpha.kubernetes.io/target" (2)
ingress.${SECRET_DOMAIN_2}
string
expose.route.labels."external-dns.home.arpa/publish" (1)
true
string
expose.clusterIP.name (1)
harbor
string
expose.clusterIP.ports.httpPort (1)
80
number
expose.secret.secretName (1)
mkcert-tls-secret
string
persistence.enabled (8)
true
boolean
persistence.persistentVolumeClaim.registry.existingClaim (6)
harbor-registry
string
persistence.persistentVolumeClaim.registry.size (2)
200Gi
string
persistence.persistentVolumeClaim.registry.storageClass (2)
longhorn-fast
string
persistence.persistentVolumeClaim.registry.accessMode (1)
ReadWriteOnce
string
persistence.persistentVolumeClaim.jobservice.jobLog.size (4)
1Gi
string
persistence.persistentVolumeClaim.jobservice.jobLog.storageClass (4)
longhorn-fast
string
persistence.persistentVolumeClaim.jobservice.jobLog.existingClaim (3)
harbor-jobservice
string
persistence.persistentVolumeClaim.jobservice.scanDataExports.existingClaim (3)
harbor-jobservice-scandata
string
persistence.persistentVolumeClaim.jobservice.scanDataExports.size (1)
1Gi
string
persistence.persistentVolumeClaim.jobservice.scanDataExports.storageClass (1)
ceph-block
string
persistence.persistentVolumeClaim.trivy.size (4)
5Gi
string
persistence.persistentVolumeClaim.trivy.storageClass (4)
ceph-block
string
persistence.persistentVolumeClaim.trivy.existingClaim (3)
harbor-trivy-v2
string
persistence.persistentVolumeClaim.redis.existingClaim (3)
harbor-redis
string
persistence.persistentVolumeClaim.redis.size (2)
1Gi
string
persistence.persistentVolumeClaim.redis.storageClass (2)
ceph-block
string
persistence.persistentVolumeClaim.database.size (2)
1Gi
string
persistence.persistentVolumeClaim.database.storageClass (2)
ceph-block
string
persistence.persistentVolumeClaim.database.existingClaim (1)
harbor-database
string
persistence.imageChartStorage.disableredirect (3)
false
boolean
persistence.imageChartStorage.type (3)
filesystem
string
persistence.imageChartStorage.filesystem.rootdirectory (2)
/storage
string
persistence.imageChartStorage.s3.bucket (2)
bucketname
string
persistence.imageChartStorage.s3.region (2)
us-west-1
string
persistence.imageChartStorage.s3.existingSecret (1)
harbor-registry-bucket-credentials
string
persistence.resourcePolicy (2)
keep
string
redis.type (8)
internal
string
redis.external.addr (4)
dragonfly.database.svc:6379
string
redis.external.coreDatabaseIndex (2)
0
string
redis.external.registryDatabaseIndex (2)
2
string
redis.external.trivyAdapterIndex (2)
5
string
redis.external.chartmuseumDatabaseIndex (1)
3
string
redis.external.chartMuseumDatabaseIndex (1)
3
string
redis.external.existingSecret (1)

string
redis.external.jobserviceDatabaseIndex (1)
1
string
redis.external.jobServiceDatabaseIndex (1)
1
string
redis.external.password (1)

string
redis.external.sentinelMasterSet (1)

string
redis.internal.image.repository (3)
ghcr.io/octohelm/harbor/redis-photon
string
redis.internal.image.tag (3)
v2.14.0
string
notary.enabled (7)
false
boolean
trivy.enabled (7)
true
boolean
trivy.image.repository (4)
ghcr.io/octohelm/harbor/trivy-adapter-photon
string
trivy.image.tag (4)
v2.14.0
string
trivy.ignoreUnfixed (1)
true
boolean
trivy.initContainers[].image (1)
envoyproxy/envoy:contrib-v1.35.3
string
trivy.initContainers[].name (1)
envoy
string
trivy.initContainers[].ports[].containerPort (1)
8000
number
trivy.initContainers[].ports[].name (1)
envoy-admin
string
trivy.initContainers[].restartPolicy (1)
Always
string
trivy.initContainers[].securityContext.allowPrivilegeEscalation (1)
false
boolean
trivy.initContainers[].securityContext.capabilities.drop[] (1)
- ALL
string
trivy.initContainers[].securityContext.privileged (1)
false
boolean
trivy.initContainers[].securityContext.runAsNonRoot (1)
true
boolean
trivy.initContainers[].securityContext.seccompProfile.type (1)
RuntimeDefault
string
trivy.initContainers[].volumeMounts[].mountPath (1)
/etc/envoy
/etc/envoy/secrets/redis
/etc/envoy/secrets/root-ca
string
trivy.initContainers[].volumeMounts[].name (1)
envoy-config
redis-cert
root-ca
string
trivy.replicas (1)
2
number
trivy.resources.limits.memory (1)
256Mi
string
trivy.resources.requests.memory (1)
256Mi
string
cache.enabled (6)
false
boolean
cache.expireHours (4)
24
number
existingSecretSecretKey (6)
harbor-secrets
string
metrics.enabled (6)
true
boolean
metrics.serviceMonitor.enabled (6)
true
boolean
metrics.serviceMonitor.metricRelabelings[].action (1)
labeldrop
string
metrics.serviceMonitor.metricRelabelings[].regex (1)
pool
string
metrics.core.path (4)
/metrics
string
metrics.core.port (4)
8001
number
metrics.exporter.path (4)
/metrics
string
metrics.exporter.port (4)
8001
number
metrics.jobservice.path (4)
/metrics
string
metrics.jobservice.port (4)
8001
number
metrics.registry.path (4)
/metrics
string
metrics.registry.port (4)
8001
number
updateStrategy.type (6)
Recreate
string
core.revisionHistoryLimit (5)
3
number
core.image.repository (4)
ghcr.io/octohelm/harbor/harbor-core
string
core.image.tag (4)
v2.14.0
string
core.podAnnotations."secret.reloader.stakater.com/reload" (4)
harbor-secrets
string
core.extraEnvVars[].name (1)
CONFIG_OVERWRITE_JSON
string
core.extraEnvVars[].valueFrom.secretKeyRef.key (1)
configureUserSettings
string
core.extraEnvVars[].valueFrom.secretKeyRef.name (1)
harbor-authentication-config
string
core.initContainers[].image (1)
envoyproxy/envoy:contrib-v1.35.3
string
core.initContainers[].name (1)
envoy
string
core.initContainers[].ports[].containerPort (1)
8000
number
core.initContainers[].ports[].name (1)
envoy-admin
string
core.initContainers[].restartPolicy (1)
Always
string
core.initContainers[].securityContext.allowPrivilegeEscalation (1)
false
boolean
core.initContainers[].securityContext.capabilities.drop[] (1)
- ALL
string
core.initContainers[].securityContext.privileged (1)
false
boolean
core.initContainers[].securityContext.runAsNonRoot (1)
true
boolean
core.initContainers[].securityContext.seccompProfile.type (1)
RuntimeDefault
string
core.initContainers[].volumeMounts[].mountPath (1)
/etc/envoy
/etc/envoy/secrets/postgres
/etc/envoy/secrets/redis
/etc/envoy/secrets/root-ca
string
core.initContainers[].volumeMounts[].name (1)
envoy-config
postgres-cert
redis-cert
root-ca
string
core.podLabels."endpoints.netpols.home.arpa/external-ingress-enabled" (1)
true
string
core.replicas (1)
2
number
exporter.revisionHistoryLimit (5)
3
number
exporter.image.repository (4)
ghcr.io/octohelm/harbor/harbor-exporter
string
exporter.image.tag (4)
v2.14.0
string
exporter.replicas (4)
1
number
ipFamily.ipv6.enabled (5)
false
boolean
jobservice.revisionHistoryLimit (5)
3
number
jobservice.image.repository (4)
ghcr.io/octohelm/harbor/harbor-jobservice
string
jobservice.image.tag (4)
v2.14.0
string
jobservice.initContainers[].image (1)
envoyproxy/envoy:contrib-v1.35.3
string
jobservice.initContainers[].name (1)
envoy
string
jobservice.initContainers[].ports[].containerPort (1)
8000
number
jobservice.initContainers[].ports[].name (1)
envoy-admin
string
jobservice.initContainers[].restartPolicy (1)
Always
string
jobservice.initContainers[].securityContext.allowPrivilegeEscalation (1)
false
boolean
jobservice.initContainers[].securityContext.capabilities.drop[] (1)
- ALL
string
jobservice.initContainers[].securityContext.privileged (1)
false
boolean
jobservice.initContainers[].securityContext.runAsNonRoot (1)
true
boolean
jobservice.initContainers[].securityContext.seccompProfile.type (1)
RuntimeDefault
string
jobservice.initContainers[].volumeMounts[].mountPath (1)
/etc/envoy
/etc/envoy/secrets/postgres
/etc/envoy/secrets/redis
/etc/envoy/secrets/root-ca
string
jobservice.initContainers[].volumeMounts[].name (1)
envoy-config
postgres-cert
redis-cert
root-ca
string
jobservice.jobLoggers[] (1)
- database
- stdout
string
jobservice.replicas (1)
2
number
logLevel (5)
warning
string
portal.revisionHistoryLimit (5)
3
number
portal.image.repository (4)
ghcr.io/octohelm/harbor/harbor-portal
string
portal.image.tag (4)
v2.14.0
string
portal.podLabels."endpoints.netpols.home.arpa/external-ingress-enabled" (1)
true
string
portal.replicas (1)
2
number
registry.revisionHistoryLimit (5)
3
number
registry.controller.image.repository (4)
ghcr.io/octohelm/harbor/harbor-registryctl
string
registry.controller.image.tag (4)
v2.14.0
string
registry.registry.image.repository (4)
ghcr.io/octohelm/harbor/registry-photon
string
registry.registry.image.tag (4)
v2.14.0
string
registry.upload_purging.age (4)
168h
string
registry.upload_purging.dryrun (4)
false
boolean
registry.upload_purging.enabled (4)
true
boolean
registry.upload_purging.interval (4)
24h
string
registry.initContainers[].envFrom[].secretRef.name (3)
postgres-harbor
string
registry.initContainers[].image (3)
ghcr.io/home-operations/postgres-init:18.4
string
registry.initContainers[].name (3)
init-db
string
registry.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)
kubernetes.io/hostname
string
registry.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)
NotIn
string
registry.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].values[] (1)
- k8s-10
string
registry.credentials.existingSecret (1)
harbor-internal-registry-credentials
string
registry.credentials.password (1)

string
registry.credentials.username (1)
harbor-internal
string
registry.replicas (1)
2
number
chartmuseum.enabled (4)
false
boolean
existingSecretAdminPassword (4)
harbor-secrets
string
imagePullPolicy (4)
Always
string
trace.enabled (4)
false
boolean
existingSecretAdminPasswordKey (2)
HARBOR_ADMIN_PASSWORD
string
secretKey (2)

string
enableMigrateHelmHook (1)
true
boolean
harborAdminPassword (1)
${HARBOR_ADMIN_PASSWORD}
string
image.pullPolicy (1)
Always
string
rules[].checkUpstream (1)
false
boolean
rules[].excludes[] (1)
- ^docker.io\/goharbor\/
string
rules[].matches[] (1)
- ^docker.io\/
- ^docker.io\/goharbor\/
string
rules[].name (1)
docker.io replace rule
harbor images
string
rules[].replace (1)
harbor.dumbhome.uk/dockerproxy
mirror.gcr.io
string