Manually create a harbor ingress

cluster/apps/default/harbor/harbor-ingress.yaml

@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: harbor-core-ingress
+  namespace: default
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+spec:
+  rules:
+    - host: &host "oci.${SECRET_NEW_DOMAIN}"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: harbor
+                port:
+                  number: 80
+  tls:
+  - hosts:
+    - *host
+    secretName: wildcard-main-tls

cluster/apps/default/harbor/helm-release.yaml

@@ -7,7 +7,7 @@ spec:
   interval: 5m
   chart:
     spec:
-      chart: harbor
+      chart: app-template
       version: 1.3.x
       sourceRef:
         kind: HelmRepository
@@ -16,19 +16,22 @@ spec:
 
   values:
     expose:
+      type: clusterIP
+    
       tls:
-        secret:
+        enabled: false
-          secretName: wildcard-main-tls
+#        secret:
-          notarySecretName: wildcard-main-tls
+#          secretName: wildcard-main-tls
-
+#          notarySecretName: wildcard-main-tls
-      ingress:
+#
-        hosts:
+#      ingress:
-          core: oci.${SECRET_NEW_DOMAIN}
+#        hosts:
-          notary: charts.${SECRET_NEW_DOMAIN}
+#          core: oci.${SECRET_NEW_DOMAIN}
-
+#          notary: charts.${SECRET_NEW_DOMAIN}
-        annotations:
+#
-          cert-manager.io/cluster-issuer: letsencrypt-production
+#        annotations:
-          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+#          cert-manager.io/cluster-issuer: letsencrypt-production
+#          traefik.ingress.kubernetes.io/router.entrypoints: websecure
 
     persistence:
       persistentVolumeClaim:
@@ -45,7 +48,7 @@ spec:
       s3:
         bucket: harbor
         existingSecret: "harbor-secret"
-        regionendpoint: http://minio.database:9000
+        regionendpoint: https://s3.seanomik.net:9000
 
     notary:
       enabled: false

cluster/apps/default/harbor/helm-repository.yaml

@@ -1,8 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: harbor-charts
-  namespace: flux-system
-spec:
-  interval: 1m
-  url: https://helm.goharbor.io

cluster/apps/default/harbor/kustomization.yaml

@@ -4,3 +4,4 @@ resources:
 - ./harbor-pv.yaml
 - ./helm-repository.yaml
 - ./helm-release.yaml
+- ./harbor-ingress.yaml