ci: remove remaining ghcr-credentials from inttest seed/minio pod overrides

pipelines/harbor/pvcs.yaml

@@ -0,0 +1,86 @@
+# Harbor PersistentVolumeClaims — bind to NFS PVs
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: harbor-registry-pvc
+  namespace: harbor-service
+  labels:
+    app: harbor
+    component: registry
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 100Gi
+  storageClassName: ""
+  volumeName: harbor-registry-pv
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: harbor-jobservice-pvc
+  namespace: harbor-service
+  labels:
+    app: harbor
+    component: jobservice
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 2Gi
+  storageClassName: ""
+  volumeName: harbor-jobservice-pv
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: harbor-database-pvc
+  namespace: harbor-service
+  labels:
+    app: harbor
+    component: database
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi
+  storageClassName: ""
+  volumeName: harbor-database-pv
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: harbor-redis-pvc
+  namespace: harbor-service
+  labels:
+    app: harbor
+    component: redis
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 2Gi
+  storageClassName: ""
+  volumeName: harbor-redis-pv
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: harbor-trivy-pvc
+  namespace: harbor-service
+  labels:
+    app: harbor
+    component: trivy
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi
+  storageClassName: ""
+  volumeName: harbor-trivy-pv

pipelines/harbor/values.yaml

@@ -0,0 +1,100 @@
+# Harbor Helm values — Stonks Oracle registry
+# Domain: registry.celestium.life
+# Ingress: Traefik with cert-manager (letsencrypt-prod)
+# Storage: NFS PVs on 192.168.42.8
+
+expose:
+  type: ingress
+  tls:
+    enabled: true
+    certSource: secret
+    secret:
+      secretName: harbor-tls
+  ingress:
+    hosts:
+      core: registry.celestium.life
+    controller: default
+    className: traefik
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+      traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      ingress.kubernetes.io/ssl-redirect: "true"
+      ingress.kubernetes.io/proxy-body-size: "0"
+
+externalURL: https://registry.celestium.life
+
+# Initial admin password — change after first login
+harborAdminPassword: "St0nks0racl3!"
+
+# Use internal database and redis (bundled with Harbor)
+database:
+  type: internal
+
+redis:
+  type: internal
+
+persistence:
+  enabled: true
+  resourcePolicy: "keep"
+  persistentVolumeClaim:
+    registry:
+      existingClaim: harbor-registry-pvc
+      size: 100Gi
+    jobservice:
+      jobLog:
+        existingClaim: harbor-jobservice-pvc
+        size: 2Gi
+    database:
+      existingClaim: harbor-database-pvc
+      size: 5Gi
+    redis:
+      existingClaim: harbor-redis-pvc
+      size: 2Gi
+    trivy:
+      existingClaim: harbor-trivy-pvc
+      size: 5Gi
+
+# Trivy vulnerability scanner
+trivy:
+  enabled: true
+
+# Metrics for Prometheus (optional, enable if you have monitoring)
+metrics:
+  enabled: false
+
+# Resource limits — conservative for a 4-node cluster
+core:
+  resources:
+    requests:
+      cpu: 100m
+      memory: 256Mi
+    limits:
+      cpu: 1000m
+      memory: 512Mi
+
+jobservice:
+  resources:
+    requests:
+      cpu: 100m
+      memory: 256Mi
+    limits:
+      cpu: 500m
+      memory: 512Mi
+
+registry:
+  resources:
+    requests:
+      cpu: 100m
+      memory: 256Mi
+    limits:
+      cpu: 1000m
+      memory: 1Gi
+
+portal:
+  resources:
+    requests:
+      cpu: 50m
+      memory: 128Mi
+    limits:
+      cpu: 500m
+      memory: 256Mi