ci: clear proxy env in minio-bucket-init, capture seed pod logs on failure

pipelines/harbor/pvcs.yaml

@@ -48,8 +48,7 @@ spec:
   resources:
     requests:
       storage: 5Gi
-  storageClassName: ""
-  volumeName: harbor-database-pv
+  storageClassName: longhorn
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

pipelines/harbor/values.yaml

@@ -16,13 +16,16 @@ expose:
     controller: default
     className: traefik
     annotations:
-      cert-manager.io/cluster-issuer: letsencrypt-prod
+      cert-manager.io/cluster-issuer: celestium-le-production
       traefik.ingress.kubernetes.io/router.entrypoints: websecure
       ingress.kubernetes.io/ssl-redirect: "true"
       ingress.kubernetes.io/proxy-body-size: "0"
 
 externalURL: https://registry.celestium.life
 
+# Proxy CA cert for Squid SSL bump — required for proxy cache to reach Docker Hub/GHCR
+caBundleSecretName: harbor-ca-bundle
+
 # Initial admin password — change after first login
 harborAdminPassword: "St0nks0racl3!"
 
@@ -51,7 +54,7 @@ persistence:
       existingClaim: harbor-redis-pvc
       size: 2Gi
     trivy:
-      existingClaim: harbor-trivy-pvc
+      storageClass: longhorn
       size: 5Gi
 
 # Trivy vulnerability scanner

pipelines/pvs/harbor-pv.yaml

@@ -20,23 +20,6 @@ spec:
 ---
 apiVersion: v1
 kind: PersistentVolume
-metadata:
-  name: harbor-database-pv
-  labels:
-    app: harbor
-    component: database
-spec:
-  capacity:
-    storage: 5Gi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.42.8
-    path: /volume1/Kubernetes/harbor/data/database
----
-apiVersion: v1
-kind: PersistentVolume
 metadata:
   name: harbor-redis-pv
   labels: