B Example of a Private Registry HA setup Helm chart #

The following example values file illustrates parameters that are required for the minimal Private Registry HA setup.

expose:
  ingress:
    hosts:
      core: core.harbor.domain 1

externalURL: https://core.harbor.domain 2

portal:
  replicas: 2 3

core:
  replicas: 2 4

jobservice:
  replicas: 2 5

registry:
  replicas: 2 6

database:
  type: external
  external: 7
    host: "192.168.0.1"
    port: "5432"
    username: "user"
    password: "password"
    coreDatabase: "registry"
    existingSecret: "" 8
    sslmode: "disable" 9

redis:
  type: external
  external: 10
    addr: "192.168.0.2:6379" 11
    sentinelMasterSet: "" 12
    coreDatabaseIndex: "0" 13
    jobserviceDatabaseIndex: "1"
    registryDatabaseIndex: "2"
    trivyAdapterIndex: "5"
    harborDatabaseIndex: "6" 14
    cacheLayerDatabaseIndex: "7"15
    username: "" 16
    password: ""
    existingSecret: "" 17

1	Core service host name in Ingress rule.
2	The external URL for the harbor-core service.
3 4 5 6	Number of replicas to create. Specify two or more.
7	Fill the database connection details in the `external` section.
8	If using an existing secret, the value must be `password`.
9	Accepts one of the following values: disable Do not use SSL. require Always use SSL and skip verification. verify-ca Always use SSL. Verify that the certificate presented by the server was signed by a trusted CA. verify-full Always use SSL. Verify that the certificate presented by the server was signed by a trusted CA and the server host name matches the one in the certificate.
10	Fill the connection information in the `external` section.
11	Supports redis and redis+sentinel. Address for redis is `<redis_host>:<redis_port>`. Address for redis+sentinel is `<sentinel1_host>:<sentinel1_port>`,`<sentinel2_host>:<sentinel2_port>`…
12	The name of the set of Valkey instances to monitor. It must be set to support redis+sentinel.
13	Must be `0` as the library that Harbor uses does not support configurations.
14	Optional. Defaults to `0` but can be configured to `6`.
15	Optional. Defaults to `0` but can be configured to `7`.
16	If empty, it is authenticated against the default user.
17	If used, the key must be <REDIS_PASSWORD>.