Update manifests to work with minikube

This will now work out of the box with minikube allowing a user to
kick the tires without having to mess about with the manifests first.

LICENSE

@@ -1,4 +1,5 @@
 Copyright 2017 Victor Sartori
+Copyright 2017 Paul Czarkowski ([email protected])
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

README.md

@@ -0,0 +1,127 @@
+# VMWare Harbor "hard way"
+
+All components of harbor was separeted in directories (with a intuitive name :p);
+The files have sufix, it represents:
+ - dpl = Deployment
+ - svc = Service
+ - pvc = Persistent Volume Claim
+ - secret = Secrets (passwords, certificates...)
+
+# What you NEED do to deploy
+
+The manifests are configured in a way that it should deploy and work as is on minikube.
+
+If you're not using minikube, LOOK inside of all files and change what makes sense for your environment like:
+ - URL's
+ - Certificates (you must generate all)
+
+## URLs
+
+The deployment is set up to use https://harbor.192.168.99.100.xip.io. This should
+resolve to your minikube deployment (`$ minikube ip` to confirm). If your machine
+is offline you may need to add it to `/etc/hosts`. If you are not using minikube
+you can update this URL as needed in the included Kubernetes manifests.
+
+
+## Certificates
+
+Self signed certificates have been created for the domain `harbor.192.168.99.100.xip.io` and have been added to the various secret files. If you need to change the domain you can generate new secrets using `$ docker run -ti -e SSL_SUBJECT="harbor.192.168.99.100.xip.io" -e SSL_IP=192.168.99.100 -e OUTPUT=k8s paulczar/omgwtfssl` (replace the subject and IP as needed) and copy output into `ingress/secret.yaml`.
+
+## Ingress and Dynamic Volume Claims
+
+Ideally your Kubernetes cluster should support both ingress and dynamic volumes.
+
+If your cluster does not support Dynamic Volume Claims you may need to
+modify the storage manifests for each service that requires it (`mysql/mysql-pvc.yaml` and `registry/registry-pvc.yaml`). You may also need to uncomment and set the storage class annotations in them.
+
+If your cluster does not support ingress you can try to use `kubectl create -f nginx` instead of
+`kubectl create -f ingress` when following the install instructions.
+
+If you are using minikube then you'll want to ensure that `ingress` and `default-storageclass` plugins are enabled. If not you should enable them. Sometimes for minikube's ingress to work correctly you need to stop and start minikube again.
+
+```
+$ minikube addons enable ingress
+$ minikube addons enable default-storageclass
+```
+
+# Example Deployment to Minikube
+
+Install the latest versions of
+
+* [minikube](https://github.com/kubernetes/minikube/releases)
+* [kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/#install-kubectl-binary-via-curl)
+
+Start minikube and ensure its set up correctly for ingress and storageclass:
+
+```
+$ minikube start                                     
+Starting local Kubernetes v1.8.0 cluster...
+Starting VM...
+Getting VM IP address...
+Moving files into cluster...
+Setting up certs...
+Connecting to cluster...
+Setting up kubeconfig...
+Starting cluster components...
+Kubectl is now configured to use the cluster.
+
+$ minikube addons list
+- default-storageclass: enabled
+- ingress: enabled
+```
+
+Deploy Harbor to Kubernetes:
+
+```
+$ for i in adminserver ingress jobservice mysql registry ui; do kubectl create -f $i; done
+configmap "adminserver-config" created
+deployment "adminserver" created
+...
+...
+service "ui" created
+```
+
+After a few minutes confirm everything looks good:
+
+```
+$ kubectl get pods
+NAME                          READY     STATUS    RESTARTS   AGE
+adminserver-7d95b54c9-mhtkg   1/1       Running   0          2m
+jobservice-545b888ffd-p8g54   1/1       Running   1          2m
+mysql-85786d8c5f-6jsrf        1/1       Running   0          2m
+registry-9c48dfbd7-jrdzv      1/1       Running   0          2m
+ui-9d68b87cf-wmkrg            1/1       Running   2          2m
+```
+
+Then try to access the UI via your browser - [https://harbor.192.168.99.100.xip.io](https://harbor.192.168.99.100.xip.io). Accept the self signed cert.
+
+Next try to login to the docker registry ( user `admin` password `Harbor12345`):
+
+```
+$ docker login harbor.192.168.99.100.xip.io
+Username (admin): test
+Password:
+Error response from daemon: Get https://harbor.192.168.99.100.xip.io/v1/users/: x509: certificate signed by unknown authority
+```
+
+It should fail. By default docker expects registries to be signed by a trusted Certificate Authority. The certificate used by our ingress service is self signed. You can tell docker to trust our self signed certificate by doing:
+
+```
+$ sudo mkdir /etc/docker/certs.d/harbor.192.168.99.100.xip.io
+$ sudo cp ingress/ca.crt /etc/docker/certs.d/harbor.192.168.99.100.xip.io/
+
+$ docker login harbor.192.168.99.100.xip.io
+Username (admin): admin
+Password:
+Login Succeeded
+$ docker pull alpine
+Using default tag: latest
+latest: Pulling from library/alpine
+Digest: sha256:d6bfc3baf615dc9618209a8d607ba2a8103d9c8a405b3bd8741d88b4bef36478
+Status: Image is up to date for alpine:latest
+$ docker tag alpine harbor.192.168.99.100.xip.io/library/alpine
+$ docker push harbor.192.168.99.100.xip.io/library/alpine
+The push refers to a repository [harbor.192.168.99.100.xip.io/library/alpine]
+2aebd096e0e2: Pushed
+latest: digest: sha256:ca559e07aab1445b3aaf1c7d1996a6b0fcc0df3557461ae582459680effd33dc size: 528
+```

adminserver/adminserver-cm.yaml

@@ -5,7 +5,7 @@ metadata:
 data:
   LOG_LEVEL: "info"
   EXT_ENDPOINT: "https://your-external-address"
-  AUTH_MODE: "ldap_auth"
+  AUTH_MODE: "database"
   SELF_REGISTRATION: "on"
   LDAP_URL: "ldaps://ldapserver"
   LDAP_SEARCH_DN: ""
@@ -35,5 +35,5 @@ data:
   GODEBUG: "netdns=cgo"
   ADMIRAL_URL: "NA"
   WITH_NOTARY: "False"
-  WITH_CLAIR: "True"
+  WITH_CLAIR: "False"
   RESET: "false"

ingress/ca.crt

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

ingress/ingress.yaml

@@ -0,0 +1,29 @@
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: ingress-harbor
+  annotations:
+    ingress.kubernetes.io/ssl-redirect: "true"
+    ingress.kubernetes.io/body-size: "0"
+    ingress.kubernetes.io/proxy-body-size: "0"
+spec:
+  tls:
+  - hosts:
+    - harbor.192.168.99.100.xip.io
+    secretName: ingress-secret
+  rules:
+  - host: harbor.192.168.99.100.xip.io
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: ui
+          servicePort: 80
+      - path: /v2
+        backend:
+          serviceName: registry
+          servicePort: 5000
+      - path: /v1
+        backend:
+          serviceName: fake-service
+          servicePort: 5000

ingress/secret.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: ingress-secret
+  namespace: default
+type: kubernetes.io/tls
+data:
+  tls.crt: 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
+  tls.key: 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

ingress/tls.crt

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

ingress/tls.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

mysql/mysql-pvc.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   annotations:
-    volume.beta.kubernetes.io/storage-class: <your-storage-class>
+#    volume.beta.kubernetes.io/storage-class: default
   name: mysql-data
 spec:
   accessModes:

registry/registry-cm.yaml

@@ -27,7 +27,7 @@ data:
     auth:
       token:
         issuer: harbor-token-issuer
-        realm: https://<yout-registry-url>/service/token
+        realm: https://harbor.192.168.99.100.xip.io/service/token
         rootcertbundle: /etc/registry/root.crt
         service: harbor-registry
 

registry/registry-pvc.yaml

@@ -2,11 +2,11 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   annotations:
-    volume.beta.kubernetes.io/storage-class: <your-storage-class>
+#     volume.beta.kubernetes.io/storage-class: default
   name: registry-data
 spec:
   accessModes:
   - ReadWriteOnce
   resources:
     requests:
-      storage: 50Gi
+      storage: 1Gi

registry/registry-secret.yaml

@@ -5,4 +5,4 @@ metadata:
 type: Opaque
 data:
   http-secret: NDIzNWtseGM0MDkzcmxkdzM0Y2ZrbDRza20yM3I=
-  root.crt: <put here cert generated encoded in base64> 
+  root.crt: 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

ui/ui-dpl.yaml

@@ -11,7 +11,7 @@ spec:
       labels:
         app: ui
     spec:
-       containers:
+      containers:
       - name: ui
         image: vmware/harbor-ui:v1.2.0
         env: