cozystack/packages/apps/harbor

Managed Harbor Container Registry

Harbor is an open-source trusted cloud-native registry project that stores, signs, and scans content.

Prerequisites

The Cozystack Harbor app stores its registry data exclusively in S3-compatible object storage: the chart pins the registry backend to S3 and exposes no filesystem option. That bucket is provisioned through COSI (objectstorage.k8s.io) from a SeaweedFS deployment, so before deploying Harbor the tenant must have SeaweedFS available — enabled on the same tenant or inherited from a parent tenant (the resolved class is propagated down the tenant tree, surfaced as the namespace.cozystack.io/seaweedfs namespace label).

Enable it by setting seaweedfs: true on the tenant (or a parent tenant):

seaweedfs: true

Without object storage in the tenant chain, Harbor cannot provision its registry bucket: the <release>-registry BucketClaim/BucketAccess never produces the <release>-registry-bucket credentials secret, so the Harbor HelmRelease stays unreconciled, waiting on BucketInfo.

storageClass is annotated as immutable in the chart schema — see docs/storage-immutability.md for the contract and which consumers enforce it.

Parameters

Common parameters

Name	Description	Type	Value
host	Hostname for external access to Harbor (defaults to 'harbor' subdomain for the tenant host).	string	""
managementWhitelist	IP addresses or CIDR ranges allowed to reach the Harbor web portal and API. /v2/ and /service/token, which docker login, image pulls and pushes use, are not restricted by this list. For the portal and API it replaces the tenant ingress whitelist rather than narrowing it, and it is matched against the client address the ingress controller sees, which is a proxy or a forwarded header rather than the real client when something in front of the controller rewrites it. Empty allows every address. Requires Ingress publishing; rejected when the tenant publishes through Gateway API.	[]string	[]
storageClass	StorageClass used to store the data.	string	""

Component configuration

Name	Description	Type	Value
core	Core API server configuration.	object	{}
core.resources	Explicit CPU and memory configuration. When omitted, the preset defined in resourcesPreset is applied.	object	{}
core.resources.cpu	Number of CPU cores allocated.	quantity	""
core.resources.memory	Amount of memory allocated.	quantity	""
core.resourcesPreset	Default sizing preset used when resources is omitted.	string	t1.small
registry	Container image registry configuration.	object	{}
registry.resources	Explicit CPU and memory configuration. When omitted, the preset defined in resourcesPreset is applied.	object	{}
registry.resources.cpu	Number of CPU cores allocated.	quantity	""
registry.resources.memory	Amount of memory allocated.	quantity	""
registry.resourcesPreset	Default sizing preset used when resources is omitted.	string	t1.small
jobservice	Background job service configuration.	object	{}
jobservice.resources	Explicit CPU and memory configuration. When omitted, the preset defined in resourcesPreset is applied.	object	{}
jobservice.resources.cpu	Number of CPU cores allocated.	quantity	""
jobservice.resources.memory	Amount of memory allocated.	quantity	""
jobservice.resourcesPreset	Default sizing preset used when resources is omitted.	string	t1.nano
trivy	Trivy vulnerability scanner configuration.	object	{}
trivy.enabled	Enable or disable the vulnerability scanner.	bool	true
trivy.size	Persistent Volume size for vulnerability database cache.	quantity	5Gi
trivy.resources	Explicit CPU and memory configuration. When omitted, the preset defined in resourcesPreset is applied.	object	{}
trivy.resources.cpu	Number of CPU cores allocated.	quantity	""
trivy.resources.memory	Amount of memory allocated.	quantity	""
trivy.resourcesPreset	Default sizing preset used when resources is omitted.	string	t1.nano
database	PostgreSQL database configuration.	object	{}
database.size	Persistent Volume size for database storage.	quantity	5Gi
database.replicas	Number of database instances.	int	2
redis	Redis cache configuration.	object	{}
redis.size	Persistent Volume size for cache storage.	quantity	1Gi
redis.replicas	Number of Redis replicas.	int	2