From 21f606970b71e55d436a15b05b063b9aa4395db8 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Sun, 5 Apr 2026 06:50:55 +0300
Subject: [PATCH] Fix harbor tls

---
 argocd-apps/harbor.yaml      | 23 +++++++++++++++++++++++
 manifests/harbor/values.yaml |  4 ++--
 2 files changed, 25 insertions(+), 2 deletions(-)

diff --git a/argocd-apps/harbor.yaml b/argocd-apps/harbor.yaml
index 6b18d43..d028e67 100644
--- a/argocd-apps/harbor.yaml
+++ b/argocd-apps/harbor.yaml
@@ -17,6 +17,29 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
+  ignoreDifferences:
+    - group: ""
+      kind: Secret
+      name: harbor-core
+      namespace: dev-tools
+      jsonPointers:
+        - /data/CSRF_KEY
+        - /data/secret
+        - /data/secretKey
+        - /data/tls.crt
+        - /data/tls.key
+    - group: ""
+      kind: Secret
+      name: harbor-jobservice
+      namespace: dev-tools
+      jsonPointers:
+        - /data/JOBSERVICE_SECRET
+    - group: ""
+      kind: Secret
+      name: harbor-registry
+      namespace: dev-tools
+      jsonPointers:
+        - /data/REGISTRY_HTTP_SECRET
   # syncPolicy:
   #   automated:
   #     prune: true
diff --git a/manifests/harbor/values.yaml b/manifests/harbor/values.yaml
index e6242b3..4880e09 100644
--- a/manifests/harbor/values.yaml
+++ b/manifests/harbor/values.yaml
@@ -8,8 +8,8 @@ expose:
   ingress:
     className: traefik
     annotations:
-      traefik.ingress.kubernetes.io/router.entrypoints: web
-      # traefik.ingress.kubernetes.io/router.tls: "true"
+      traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      traefik.ingress.kubernetes.io/router.tls: "true"
     hosts:
       core: harbor.dvirlabs.com