<div id="readability-page-1" class="page"><div>
<section data-height="100" data-opacity="0.3">

<header>
<p><a href="https://jaigouk.com/"><img src="https://files.jaigouk.com/2018/08/jaigouk-blog-logo.png" alt="Jaigouk.Kim"></a>
</p>
<nav>
<ul>
<li>
<a href="https://jaigouk.com/">Home</a>
</li>
<li>
<a href="https://jaigouk.com/about/">About</a>
</li>
<li>
<a href="https://jaigouk.com/tag/posts-tag/">Posts</a>
</li>
<li>
<a href="https://jaigouk.com/projects/">Projects</a>
</li>
<li>
<a href="https://jaigouk.com/contact/">Contact</a>
</li>
</ul>
<ul>
<li>
<span>
<svg>
<use xlink:href="/assets/svg/icons.svg?v=546e9e9eb5#menu"></use>
</svg>
</span>
</li>
</ul>
</nav>
</header>
<section>


<p>
Deploying harbor arm64 registry to raspberry pi k3s cluster
</p>
</section>

</section>
<section>
<p>It took some time to find a simple and easy way to deploy registry with UI to my rpi k3s cluster. The official repo does not provide arm64 images and it requires high memory. I found a way to deploy harbor on my rpi 4 cluster.<br></p><pre><code>git clone https://github.com/querycap/harbor.git
cd harbor
make dep
cd components/harbor
</code></pre>
<h2 id="edit-cue-files">edit cue files</h2>
<p>app.cue file</p>
<pre><code>package harbor

import (
	harbor "github.com/goharbor/harbor-helm:chart"
)

{
	apiVersion: "octohelm.tech/v1alpha"
	kind:       "Release"
	metadata: namespace: "harbor-system"
	metadata: labels: context: "default"
	#name:      "harbor"
	#namespace: "harbor-system"
	#context:   *"hw-sg" | string
</code></pre>
<p>values.cue file</p>
<p>change the tag based on <a href="https://github.com/orgs/querycap/packages/container/package/harbor%2Fharbor-portal">querycap`s harbor/harbor-portal</a></p>
<pre><code>package harbor

#values: {
	host:          *"harbor.example.io" | string
	adminPassword: *"xxxxxx" | string

	image: repo: "ghcr.io/querycap/harbor"
	image: tag:  "ec0ba11"
}

</code></pre>
<p>install <a href="https://cuelang.org/docs/integrations/json/">cue</a> and deploy</p>
<pre><code>go install cuelang.org/go/cmd/<a href="/cdn-cgi/l/email-protection" data-cfemail="23405646634f4257465057">[email&nbsp;protected]</a>

cuem k show commponents/harber &gt; result.yaml

# edit result.yaml

kubectl apply -f result.yaml

</code></pre>
<p><img src="https://files.jaigouk.com/2021/04/harbor-on-kubenetes.png" alt="harbor-on-kubenetes" loading="lazy"></p>
<h2 id="dex-oidc">dex OIDC</h2>
<p>To make harbor more secure, I installed <a href="https://github.com/dexidp/dex">dex</a></p>
<p>here are the links for installing it</p>
<ul>
<li><a href="https://dexidp.io/docs/kubernetes/">https://dexidp.io/docs/kubernetes/</a></li>
<li><a href="https://github.com/dexidp/dex/blob/master/examples/k8s/dex.yaml">https://github.com/dexidp/dex/blob/master/examples/k8s/dex.yaml</a></li>
<li><a href="https://goharbor.io/docs/1.10/administration/configure-authentication/oidc-auth/">https://goharbor.io/docs/1.10/administration/configure-authentication/oidc-auth/</a></li>
</ul>

</section>

<div>
<p><a href="/author/jaigouk/">
<img src="https://www.gravatar.com/avatar/dfa5114caa61dd2b010e998cff905d73?s=250&amp;d=mm&amp;r=x" alt="Jaigouk KIm">
</a></p>
</div>


</div></div>

Jaigouk.Kim

It took some time to find a simple and easy way to deploy registry with UI to my rpi k3s cluster. The official repo does not provide arm64 images and it requires high memory. I found a way to deploy harbor on my rpi 4 cluster.
git clone https://github.com/querycap/harbor.git
cd harbor
make dep
cd components/harbor
edit cue files
app.cue file
package harbor
import (
	harbor "github.com/goharbor/harbor-helm:chart"
)
{
	apiVersion: "octohelm.tech/v1alpha"
	kind:       "Release"
	metadata: namespace: "harbor-system"
	metadata: labels: context: "default"
	#name:      "harbor"
	#namespace: "harbor-system"
	#context:   *"hw-sg" | string
values.cue file
change the tag based on querycap`s harbor/harbor-portal
package harbor
#values: {
	host:          *"harbor.example.io" | string
	adminPassword: *"xxxxxx" | string
	image: repo: "ghcr.io/querycap/harbor"
	image: tag:  "ec0ba11"
}
install cue and deploy
go install cuelang.org/go/cmd/cue@latest
cuem k show commponents/harber > result.yaml
# edit result.yaml
kubectl apply -f result.yaml
dex OIDC
To make harbor more secure, I installed dex
here are the links for installing it
https://dexidp.io/docs/kubernetes/
https://github.com/dexidp/dex/blob/master/examples/k8s/dex.yaml
https://goharbor.io/docs/1.10/administration/configure-authentication/oidc-auth/

Deploying harbor

댓글