20 Commits

Author SHA1 Message Date
3cdb1900c6 Try clean harbor 2026-03-22 06:59:32 +02:00
402b75e1ce Try clean harbor 2026-03-22 05:48:17 +02:00
f25de5e71a Try clean harbor 2026-03-22 05:43:11 +02:00
07797d7618 Phase 1: Configure Harbor with Cloudflare Origin Certificate
- Remove cert-manager annotation (manual TLS secret)
- Reference harbor-ingress secret (Cloudflare Origin CA)
- Keep stable resource names for clean March 23 switchover
- Cloudflare-trusted certificate enables proxy mode

Phase 2 (March 23): Add cert-manager annotation back for Let's Encrypt
2026-03-22 01:01:10 +02:00
a76c330d32 fix: Switch Harbor to Let's Encrypt staging to bypass rate limit
Rate limit error: 429 too many certificates (5) issued for harbor.dvirlabs.com
Must wait until March 23, 2026 07:00:21 UTC before using production again.

Changes:
- Created letsencrypt-staging ClusterIssuer
- Updated Harbor to use staging issuer temporarily
- Deleted failed certificate resources

After March 23, change cert-manager.io/cluster-issuer back to 'letsencrypt'
2026-03-22 00:00:59 +02:00
798d50ebb0 fix: Configure Harbor to use cert-manager instead of auto-generated certs
- Change Harbor certSource from 'auto' to 'secret'
- Reference stable secret name: harbor-ingress
- Keep cert-manager.io/cluster-issuer annotation for auto certificate management
- Remove harbor-ingress-v2 workaround name
- Add cleanup script and documentation

This fixes IncorrectIssuer error where Harbor's self-signed CA
conflicted with cert-manager's Let's Encrypt certificate management.

Resolves:
- 502 errors due to TLS configuration conflict
- Failed ACME order finalization (orderNotReady)
- Certificate stuck in non-Ready state
- Duplicate certificate issuance attempts
2026-03-21 23:56:21 +02:00
af484d51c8 Update harbor tls 2026-03-21 23:18:09 +02:00
fb930fbfdf Update harbor tls 2026-03-21 23:09:23 +02:00
e046b76cf2 Update harbor tls 2026-03-21 22:59:41 +02:00
d9eb8466f7 fix: change Harbor ingress from HTTP to HTTPS entrypoint 2026-03-21 22:19:08 +02:00
0324a73cb8 Update harbor ingress to use internal http and external keeps https 2026-03-21 22:00:28 +02:00
d0f74b039f Fix Harbor storage class and nodeSelector 2026-03-18 09:03:08 +02:00
abe216a2b6 Set exporter enable true in harbor 2025-08-01 04:55:42 +03:00
6e0a5f6c13 Enable all metrics for harbor 2025-08-01 04:43:16 +03:00
1a1ce695cb resize harbor registry 2025-06-05 01:16:03 +03:00
079b184fe7 Add storage to harbor 2025-06-04 21:27:03 +03:00
91cb2000eb Add nodeSelector to avoid pods running on master 2025-05-27 00:09:37 +03:00
2d3f2b5fae Deploy harbor registry on dev-tools ns 2025-05-13 01:17:54 +03:00
09df3ef304 Deploy harbor registry on dev-tools ns 2025-05-13 01:15:08 +03:00
6f08a12b9a Deploy harbor registry 2025-05-13 01:11:55 +03:00