feat(apps): add harbor

apps/hq/harbor.yaml

@@ -0,0 +1,63 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: mareshq-registry
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "50"
+spec:
+  project: hq
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+  destination:
+    server: "https://kubernetes.default.svc"
+    namespace: hq-registry
+  source:
+    chart: harbor
+    repoURL: https://helm.goharbor.io
+    targetRevision: 1.16.0
+    helm:
+      releaseName: harbor
+      valuesObject:
+        externalURL: https://registry.marespkg.com
+        expose:
+          type: ingress
+          tls:
+            enabled: true
+            certSource: secret
+            secret:
+              secretName: registry-marespkg-com-ingress-tls
+          ingress:
+            className: nginx
+            annotations:
+              cert-manager.io/cluster-issuer: letsencrypt-dns-production
+              external-dns.alpha.kubernetes.io/hostname: registry.marespkg.com
+              external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
+            hosts:
+              core: registry.marespkg.com
+        database:
+          type: external
+          external:
+            host: postgres-rw.postgres.svc
+            port: 5432
+            username: harbor
+            password: "YFC0tae.bpz2ncf!rye"
+            # existingSecret: harbor-user-credentials
+            coreDatabase: harbor
+        persistence:
+          enabled: false
+        imageChartStorage:
+          type: s3
+          s3:
+            region: us-east-1 # see: https://developers.cloudflare.com/r2/api/s3/api/#bucket-region
+            bucket: marespkg-registry-storage
+            regionendpoint: https://f24333bb3c47d6db753e57e2a0c90082.r2.cloudflarestorage.com
+            accesskey: "e9d400c4f63375cc94f6f125724f3aa6"
+            secretkey: "5e1da29e9ab131c1c312add4bda82a4bdb75c4afe0f69c40dd384c5f0a6f8120"
+
+        metrics:
+          enabled: false