gaoandClaude
fc9371e443
## 🏗️ 新增功能 - **shared/**: 完整的基础组件部署方案 - docker-compose.yml: 统一编排所有基础服务 - .env.example: 标准化环境变量配置 - prometheus/prometheus.yml: 监控配置 - bin/up.sh & down.sh: 一键部署脚本 - README.md: 完整的使用文档 ## 🛠️ 核心服务 - **数据库层**: PostgreSQL 16 + MySQL 8 (统一密码: 123456) - **缓存层**: Redis 7 (密码: 123456) - **代码管理**: GitLab CE + Gitea (双代码仓库) - **镜像仓库**: Harbor (Docker Registry) - **监控层**: Prometheus + Grafana + cAdvisor - **网关反代**: Traefik v3.1 ## 🔧 技术优化 - 所有端口统一使用 2xx80 系列，避免端口冲突 - 统一网络架构 (core network)，支持多项目接入 - 完善的健康检查和服务依赖配置 - 支持 ARM64 架构 (MySQL 8 兼容性修复) ## 📚 文档更新 - SYSTEM-CONFIG.md: 系统配置文档完善 - harbor/README.md: Harbor 模块使用说明 - docs/: 完整的部署和运维文档 ## 🚀 部署说明 所有服务已成功启动并通过验证： - GitLab: http://localhost:28082 (root/SecurePass2024!) - Gitea: http://localhost:23000 - Harbor: http://localhost:28081 - Grafana: http://localhost:23001 (admin/123456) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]>
95 lines
2.4 KiB
YAML
95 lines
2.4 KiB
YAML
# values-harbor.yaml (Helm chart: goharbor/harbor)
|
||
# 访问地址: https://harbor.127.0.0.1.nip.io
|
||
# 命名空间: devops
|
||
|
||
externalURL: "https://harbor.127.0.0.1.nip.io"
|
||
|
||
expose:
|
||
type: ingress
|
||
tls:
|
||
enabled: true
|
||
certSource: secret
|
||
secret:
|
||
secretName: harbor-tls
|
||
ingress:
|
||
hosts:
|
||
core: "harbor.127.0.0.1.nip.io"
|
||
className: "nginx"
|
||
annotations: {}
|
||
controller: default
|
||
|
||
# 持久化：建议把原 harbor registry 等数据卷映射为 PVC（existingClaim）
|
||
persistence:
|
||
enabled: true
|
||
resourcePolicy: "keep"
|
||
persistentVolumeClaim:
|
||
# 仅列常用组件，其余按需开启
|
||
registry:
|
||
existingClaim: "pvc-harbor-registry" # 将 Docker 卷迁移到该 PVC
|
||
size: 50Gi
|
||
accessMode: ReadWriteOnce
|
||
storageClass: "<CHANGE_ME_or_remove>"
|
||
chartmuseum:
|
||
enabled: false
|
||
database:
|
||
# 为简化本地部署，使用 chart 自带数据库，如需外置 PG 请改 database.external
|
||
existingClaim: "pvc-harbor-db"
|
||
size: 10Gi
|
||
redis:
|
||
# 同上，使用 chart 内置 redis，或外置 redis.external
|
||
existingClaim: "pvc-harbor-redis"
|
||
size: 2Gi
|
||
jobservice:
|
||
jobLog:
|
||
existingClaim: "pvc-harbor-joblog"
|
||
size: 5Gi
|
||
trivy:
|
||
existingClaim: "pvc-harbor-trivy"
|
||
size: 10Gi
|
||
|
||
# 管理员密码（首次安装生效）
|
||
harborAdminPassword: "jZ0ezYX1hon6HI6QucmGA=="
|
||
|
||
# 使用外置共享 PG/Redis
|
||
database:
|
||
external:
|
||
enabled: true
|
||
host: "postgresql.shared-base.svc.cluster.local"
|
||
port: 5432
|
||
username: "harbor"
|
||
password: "harbor123"
|
||
coreDatabase: "registry"
|
||
notaryServerDatabase: "notary_server"
|
||
notarySignerDatabase: "notary_signer"
|
||
redis:
|
||
external:
|
||
enabled: true
|
||
addr: "redis.shared-base.svc.cluster.local:6379"
|
||
coreDatabaseIndex: 1
|
||
jobserviceDatabaseIndex: 2
|
||
registryDatabaseIndex: 3
|
||
# password: "" # 暂时不使用密码
|
||
|
||
# 关闭不必要组件以降低本地资源占用（按需开启）
|
||
chartmuseum:
|
||
enabled: false
|
||
notary:
|
||
enabled: false
|
||
|
||
# 资源请求（本地开发较小即可）
|
||
portal:
|
||
resources:
|
||
requests: { cpu: 50m, memory: 128Mi }
|
||
core:
|
||
resources:
|
||
requests: { cpu: 100m, memory: 256Mi }
|
||
jobservice:
|
||
resources:
|
||
requests: { cpu: 100m, memory: 256Mi }
|
||
registry:
|
||
resources:
|
||
requests: { cpu: 100m, memory: 256Mi }
|
||
|
||
# Metrics（可选，Prometheus 可抓取）
|
||
metrics:
|
||
enabled: true |