expose:
  type: ingress
  tls:
    enabled: true
    certSource: secret
    secret:
      secretName: harbor-ingress
  ingress:
    className: traefik
    annotations:
      traefik.ingress.kubernetes.io/router.entrypoints: web
      # traefik.ingress.kubernetes.io/router.tls: "true"
    hosts:
      core: harbor.dvirlabs.com

externalURL: https://harbor.dvirlabs.com

harborAdminPassword: "SuperSecurePassword123"

notary:
  enabled: false

persistence:
  enabled: true
  resourcePolicy: keep
  persistentVolumeClaim:
    registry:
      storageClass: nfs-client
      accessMode: ReadWriteOnce
      size: 400Gi
    jobservice:
      storageClass: nfs-client
      accessMode: ReadWriteOnce
      size: 1Gi
    database:
      storageClass: nfs-client
      accessMode: ReadWriteOnce
      size: 5Gi
    redis:
      storageClass: nfs-client
      accessMode: ReadWriteOnce
      size: 5Gi
    trivy:
      storageClass: nfs-client
      accessMode: ReadWriteOnce
      size: 10Gi

database:
  type: internal

redis:
  type: internal

trivy:
  enabled: true

metrics:
  enabled: true

exporter:
  enabled: true

cache:
  enabled: true

nodeSelector:
  workload: general

affinity:
  nodeAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      nodeSelectorTerms:
        - matchExpressions:
            - key: workload
              operator: In
              values:
                - general
            - key: node-role.kubernetes.io/control-plane
              operator: DoesNotExist