harbor: deploy

kahnwong · Aug 25, 2024 · 4b7cfdb · 4b7cfdb
1 parent 1a63b31
commit 4b7cfdb
Show file tree

Hide file tree

Showing 13 changed files with 104 additions and 83 deletions.
diff --git a/caddy/config/Caddyfile b/caddy/config/Caddyfile
@@ -2,11 +2,7 @@ audiobookshelf.karnwong.me {
     reverse_proxy 192.168.1.51:30027
 }
 harbor.karnwong.me {
-    reverse_proxy 192.168.1.51:30501 {
-        transport http {
-            tls_insecure_skip_verify
-        }
-    }
+    reverse_proxy 192.168.1.36:30500
 }
 immich.karnwong.me {
     reverse_proxy 192.168.1.51:30030

diff --git a/cloudflare/README.md b/cloudflare/README.md
@@ -13,15 +13,15 @@ All users - API Tokens:Edit
 
 | Name | Version |
 |------|---------|
-| cloudflare | ~> 4.35.0 |
-| sops | 1.0.0 |
+| cloudflare | ~> 4.40.0 |
+| sops | 1.1.1 |
 
 ## Providers
 
 | Name | Version |
 |------|---------|
-| cloudflare | 4.35.0 |
-| sops | 1.0.0 |
+| cloudflare | 4.40.0 |
+| sops | 1.1.1 |
 
 ## Modules
 
@@ -50,7 +50,7 @@ All users - API Tokens:Edit
 | [cloudflare_record.vercel_dns](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/record) | resource |
 | [cloudflare_record.www_dummy](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/record) | resource |
 | [cloudflare_api_token_permission_groups.all](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/data-sources/api_token_permission_groups) | data source |
-| [sops_file.secrets](https://registry.terraform.io/providers/carlpett/sops/1.0.0/docs/data-sources/file) | data source |
+| [sops_file.secrets](https://registry.terraform.io/providers/carlpett/sops/1.1.1/docs/data-sources/file) | data source |
 
 ## Inputs
 

diff --git a/cloudflare/dns.tf b/cloudflare/dns.tf
@@ -32,6 +32,7 @@ locals {
     "audiobookshelf",
     "books",
     "git",
+    "harbor",
     "jellyfin", # https://github.com/jellyfin/jellyfin-media-player/issues/174#issuecomment-1306167299
     "minio",
     "share", # prevent request entity too large

diff --git a/kubernetes/clusters/snikt/README.md b/kubernetes/clusters/snikt/README.md
@@ -29,6 +29,7 @@ kubectl taint nodes fringe-division storage-required=true:NoSchedule
 | Name | Type |
 |------|------|
 | [helm_release.fringe_division](https://registry.terraform.io/providers/hashicorp/helm/2.12.1/docs/resources/release) | resource |
+| [helm_release.harbor](https://registry.terraform.io/providers/hashicorp/helm/2.12.1/docs/resources/release) | resource |
 | [helm_release.jobs](https://registry.terraform.io/providers/hashicorp/helm/2.12.1/docs/resources/release) | resource |
 | [helm_release.jobs_fringe_division](https://registry.terraform.io/providers/hashicorp/helm/2.12.1/docs/resources/release) | resource |
 | [helm_release.livegrep_indexer](https://registry.terraform.io/providers/hashicorp/helm/2.12.1/docs/resources/release) | resource |
@@ -61,4 +62,7 @@ kubectl taint nodes fringe-division storage-required=true:NoSchedule
 | client\_key | n/a | `string` | n/a | yes |
 | cluster\_ca\_certificate | n/a | `string` | n/a | yes |
 | host | n/a | `string` | n/a | yes |
+| registry\_password | n/a | `string` | n/a | yes |
+| registry\_server | n/a | `string` | n/a | yes |
+| registry\_username | n/a | `string` | n/a | yes |
 <!-- END_TF_DOCS -->
diff --git a/kubernetes/clusters/snikt/configmaps/dashy.sops.yaml b/kubernetes/clusters/snikt/configmaps/dashy.sops.yaml
@@ -13,6 +13,9 @@ sections:
         - title: ENC[AES256_GCM,data:eYZmS9s=,iv:+c19H+3CHDgCa3zYQAytC0r44e45aC1M6EGJlrZAaqo=,tag:VnpAgyyNAnRV+M5RUits8A==,type:str]
           icon: ENC[AES256_GCM,data:hQvP3+keaB4=,iv:Kn8VlmHiSoWQUdryNGqp0iTij0zng9rRe92sHWifbiA=,tag:PJW5GkAY5vR73a5lgsY8Fg==,type:str]
           url: ENC[AES256_GCM,data:NkXtuEo6qY3jPE+8kSOywkBe5lMbvEI=,iv:LP8JEM47OZwn4CIChb7ipzTcTZ0kwU0rFlXw7nmVWzY=,tag:1EkKkJFjKxpuE35DC7uT8Q==,type:str]
+        - title: ENC[AES256_GCM,data:bvOoOZCF,iv:FSUxR8oVv33sUtEfnPYbKvlVS6f1sMC0mj9H7elGsBg=,tag:RXh9+71zs1+O9pgFVtgjeQ==,type:str]
+          icon: ENC[AES256_GCM,data:0AEf5bTC6giC,iv:pimK5k2/UXIyeqWpWxcxXLf5KGQcH/ggIMtHEJBdJAs=,tag:zBcO/+HXqaghq6CDLQMXXQ==,type:str]
+          url: ENC[AES256_GCM,data:rHkecWceCup9s652yof/PwzSdGWr0tMah18=,iv:QVDYU9tPeJFkckJiAYQjk2tCKGR30fRfAEsqOibHTWo=,tag:+jp6ZNhsewsAckboEVClMg==,type:str]
         - title: ENC[AES256_GCM,data:UiqKkuA=,iv:6YAv8mqJlrfcukCDyROWj1lwa5RVxFWVMk0tnmSWKM4=,tag:UuGI1IuP/rkK6Cbg2setZw==,type:str]
           icon: ENC[AES256_GCM,data:KwGTBR77DXQ=,iv:cVzsFrNwvSW/QKfkgQMra3f8d71CEty5N/z3FMPYFBk=,tag:yA4d+BufM7AbTsH3Z2xHLw==,type:str]
           url: ENC[AES256_GCM,data:Jzsx75f7O2v79HSJ87kAu08chwEgzh8OK2A=,iv:Q9HcWZjaRMNuH7DIOTNGYy5hDKg1nHDW26GGMxpbxMk=,tag:xS5UvvP/a5zS8aHoRobCIw==,type:str]
@@ -168,8 +171,8 @@ sops:
             YUs3cXA2TnB4c21FQzg0bnFyTkRDejgKzf7PO4qiPs7dWhWadFXEwXmawv1p2xwZ
             Vjnq6Nqhj2Cvt+fCAh0wMHi1kI8XIjDoOMcwweKgjFMkv86gBkgtLg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-08-20T09:21:04Z"
-    mac: ENC[AES256_GCM,data:69cMeyZYKogYBfi3pq2DGVT0DYOl/Prc+dNHgV1hMnlGcaTTh33hPX13LL5SV2Jw5IxEVXx/niiIKwxI291qfr8Q64mIitbIXkL2QOuo02dKHtoT+inAdeIHtPxdho6yFOWlTKMVNnNbaw+lx3ewy0sbOM36/Mqet+4OxLGQyTk=,iv:jW2e2TkaPio9lVCOXi4CMYhpwnJbcbz+hxokX/jYYns=,tag:ttwy10G2w1Od25i1xHoS9A==,type:str]
+    lastmodified: "2024-08-25T06:07:13Z"
+    mac: ENC[AES256_GCM,data:Fl2KNiaTqQl1TIsDKiqxcOLmgA1T3d30QutpNWVQ9Da4W4r4ivgwHUdZDFYSVZzj6kLBGSYaPPKpUplzJh3ASj8BOCw+uKnZhtQJdyoGMrhoZQj1ioJiLo2ov+DAciv07F6jOehZZuW99ODpl8kAerj+y761UMau2qXPmIEkig4=,iv:nBe8ULMEe10YifOzoTQfQc/H8hZYID8kdSPSJDpIjo8=,tag:bqkMmiuE9KrT0AqSfDfOwg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.0
diff --git a/kubernetes/clusters/snikt/deployments.tf b/kubernetes/clusters/snikt/deployments.tf
@@ -92,3 +92,20 @@ resource "helm_release" "fringe_division" {
 resource "kubernetes_manifest" "qa_discord_bot" {
   manifest = yamldecode(file("./helm/deployments/bots/qa-discord-bot.yaml"))
 }
+
+resource "helm_release" "harbor" {
+  name       = "harbor"
+  namespace  = "harbor"
+  repository = "https://helm.goharbor.io"
+  version    = "1.15.0"
+  chart      = "harbor"
+
+  values = [
+    file("./helm/deployments/harbor/values.yaml")
+  ]
+
+  set {
+    name  = "harborAdminPassword"
+    value = var.registry_password
+  }
+}
diff --git a/...s/z-unused/deployments/harbor/harbor.yaml → ...snikt/helm/deployments/harbor/values.yaml b/...s/z-unused/deployments/harbor/harbor.yaml → ...snikt/helm/deployments/harbor/values.yaml
@@ -1,16 +1,20 @@
 ---
-# adminPassword:
+expose:
+  type: nodePort
+  tls:
+    enabled: false
+  nodePort:
+    name: harbor
+    ports:
+      http:
+        port: 80
+        nodePort: 30500
+      https:
+        port: 443
+        nodePort: 30501
+    annotations: {}
+
 externalURL: https://harbor.karnwong.me
-service:
-  type: NodePort
-  ports:
-    http: 90
-    https: 91
-    notary: 92
-  nodePorts:
-    http: 30500
-    https: 30501
-    notary: 30502
 
 nginx:
   tolerations:
@@ -60,6 +64,25 @@ trivy:
       effect: "NoSchedule"
   nodeSelector:
     kubernetes.io/hostname: "fringe-division"
+database:
+  internal:
+    tolerations:
+      - key: "storage-required"
+        operator: "Equal"
+        value: "true"
+        effect: "NoSchedule"
+    nodeSelector:
+      kubernetes.io/hostname: "fringe-division"
+redis:
+  type: internal
+  internal:
+    tolerations:
+      - key: "storage-required"
+        operator: "Equal"
+        value: "true"
+        effect: "NoSchedule"
+    nodeSelector:
+      kubernetes.io/hostname: "fringe-division"
 exporter:
   tolerations:
     - key: "storage-required"

diff --git a/kubernetes/clusters/snikt/namespaces.tf b/kubernetes/clusters/snikt/namespaces.tf
@@ -2,6 +2,7 @@ locals {
   namespaces = toset([
     "bots",
     "default",
+    "harbor",
     "immich",
     "infrastructure",
     "jobs",

diff --git a/kubernetes/clusters/snikt/secrets.tf b/kubernetes/clusters/snikt/secrets.tf
@@ -49,3 +49,26 @@ resource "kubernetes_secret" "secrets" {
 
   depends_on = [data.sops_file.secrets]
 }
+
+# resource "kubernetes_secret" "harbor_config" {
+#   for_each = local.namespaces
+#
+#   metadata {
+#     name      = "harbor-cfg"
+#     namespace = each.key
+#   }
+#
+#   type = "kubernetes.io/dockerconfigjson"
+#
+#   data = {
+#     ".dockerconfigjson" = jsonencode({
+#       auths = {
+#         (var.registry_server) = {
+#           "username" = var.registry_username
+#           "password" = var.registry_password
+#           "auth"     = base64encode("${var.registry_username}:${var.registry_password}")
+#         }
+#       }
+#     })
+#   }
+# }
diff --git a/kubernetes/clusters/snikt/terraform.tfvars.sops b/kubernetes/clusters/snikt/terraform.tfvars.sops
@@ -1,5 +1,5 @@
 {
-	"data": "ENC[AES256_GCM,data:+N2/BauV2pxmVYSfqdUFPePX77EgssmfnRTkwmSCm/ApCD0EmSLPitjKBSMu0gUg03k9NSCS+AfzVdwWmfHXLWAQnU0feTsbUYwv7tFKIIPL4XYeHbXu5mkG97iEnZ4oqW0SsG51pDKF144HPDSQKy5Ot6Ib/W88ltDF/U/NvU69jXpTKp4Nq92qJNSl5I8l7+rNrSdyOl1WC+7Z1J3DnKPSvMUPV57zsJ0DPFoJ1W70s75RvoFvRxrdZmrEZ/bvoPv/f+UugMfT8QFRn2LbTQOCPEX5LPL3Fy+NnR2o0yaFaKEG7HQ9s8DT2cye9f5SsN7oel2aazrv5P/NnSfD7BpCz/tDmd6JCsqmiJjMGNw/GKsPZpclICql44lZ9hmEJoqxsnUTB0dY8i48c3nHZqPaewpc9VGvmxfAr9qjebeCtUo686qx8/s1aZuArOAJ2ZWM1tOdW/hwtE1YuOpGBRzU8/H6V7NoUqQIL5ntKRQx4I9wECTiYGeq/bSSLIS4oT35qp8J+qBwfgYTJuiaA2qeI243ET6reysOvDy5RqfAhQZqttG3MxnMRHCwekU2a69tGobHIKpb9rqyV8GJ4SR0Z43IjhRff7NZ610Uk0I8d2Fpvl0CcCr2bk40E88L12lJa0chreV1MdjzHpCpXD9MamVgmYStAHxgKw1o189XBp3kmTITpPM93fgKz0weieoGHQUX2asuTfjJuY8yJ30FAxDSE9XEogJeJcP/SLX8ERj7DH1wIVysoJWJhUPLU0PjlgtTnE91fEiF+xSP8MmtZUJPN6csQjoo3lZ0dL/A/V74ZxliGQ5Nz6NpNhO8fSHoyAR71ZJhUC9BQie7CU/lA2l9lp+5e1fCas9gXU0kE1UgBVbmRFrhEDgA1eTW6wpPZpxL/FuNY4g7rhL7omrXmixnPqAIAHAKott8xF+lpTht2SKE9rZId43YSQjsVGlg0e/xZshIadAITBDjw6iX3NOOu69hF/UEQLi4rhrSmWSh7CGtE1NfdKz0aM7W/8OLphkUOMle2BqOaqumOB1zEJ1gZl0N6ZNmI2ndr3N3gjrwjBP7iGQ4LHGOMyWfzZDPs7XvBQIrdAtHcdIJ7t4FxQ7TkFvnbDfLSH0XA88NggG+a9v+2XT+F90rCIYUxktM9nCZPdx+ivB2DWqZxjEAbOGZWaeR4HpIPLOl3GeMdkJ+2Udhq8ns2e0XgQHH8u9JIvTbCfa+nl2k5Via45TsQnGXpPW5Hc3FEoXIOrP4DNrtoj1MMhx/A7BoSQEy5cqM1ookkECrX1voP2qc2e1Lw8h/Ioas8vw1wt6YUe8+hpD3dlnDw+VnnpKvnr0w6186DKfVjt5arEC2i2qncyXyMLTSDQDfKll7aMGrOzltGFpnzl9DkMN4H7vbLqWac3jtB9R0NlzzdpCeCTgQPyxq50apWA/yai0dcT+VYfPK6jTB6paiUTJPYqcy19p9zTf/eC/tnSHwpjcFL8n/+B6td/zsKDfU86XFSM3fwf/cd5vTvY0FdOzJ4+V9vb3/dN22QxDObevMwwJaSBwZ1+kMtdlBRUpHYMh/BGe+v+548kRq/znSwAoY9hW092+h7eUSEM3j3+7mhKkdE92tmUYTjSOWTT5LgFcrEZ//bveIrKa30ew/u4oTUfME+Au/ZCdAgkvawkk3ccGeZ38LBisSzoRHY+A9TuDvVdH9rUV+C9xukpxgZs8QbLgxws/+p561VrQXNj8LiFmjEYgzy6FVcwVRG+PaU9cSjNIZLjxQOJmEyJMW0v/ijWs5jDfVdVmHkZ0CmBbThR0Sf4fyQkhdwcznhWZNmUs7LlfCHM5X+2Hv7FutyE8t/JbCFQbcD08Y7PgiHvoJAA51pBI48VFgsKGaUi+aj3XE6Hi4UdawnVlD984L+QQINBqEq6+W+xqdSfAzLhiuII2twaif9G8wmKrgD4318cU2dUTqotqjNVg5B78XI4wU6dn7MkFK7TTsY7vs1vUQJk1c1bYjFOPqmmNZh8NeD5SMcB5qvnOO4uQ/yqEECM+ai06Zcig4M2c0R/RIJGwrwFiABmayE+9ArTTyoCWhZmU876EYGlNujCYEjpbzxVtLNcB8RmbeY4rA1kmGnDjF0MMeoAuBBAh+fm5Yz7O1j+Mk+BnH2LJm0TfwuF8MJhz2TNh0Di2FRTwuyzvlnhUsRDI9x+e1jvUfjwFpswJd8zLtoTYFVkCS2iz9QUMZL4KGLvoXzcjDlAsvNlkLMGztpe7Va09rc+aG0QDZp3KR/vAzIz51GFQApGoYqGzp4OoxcF0uRZPwMlve4wqoMRpuH3H9mR1A0D18Ka+m/zWfHtcblRFp0FL8UZh2C94sY3+6nvLz3Kyh6Ulp30ycZNKv//imKvJnOjejxvAx/Mo2vNltlOxDMdz2s+7JmT1AHBXOozJHzpnr+IrVzDebYb5Hn6Ljx69pyRjog4+IHVSCtluVvP37ooS2/QHZWtJ76yzZinkgWBqsTy6QJ/5czs7gxFy7oyDDh2/4IBAGWYU9tX87P3WJKuSxeFw2BUh6pQC3C1D4BcujUzlNrAT7bn47FZVihf4qhLuADpNi09Ls8xM5zld25xgInFpxbZwlMCECE0pBUBL6tIaAEH+X3esee171ru8u1CcZuqxZLqAD5qQ5Rs85Bv3rDDAuJ2g/yJy7Xtk4LRnpSPnRtVT0FpCgRuYHgclSAalc3PQBjV8HaFC02Ae7aNHDa0QZ0L365tQXKEUhuuDsMz1Al4SyWLx7+OmAtvpx3doDcgXpKxEMmTYJ9XDrNzZ4ezfq7xRYkIu1qZym6aBnu165p9sTbFL+mwBoQ1FQkKyVW8zLVs77Y0lDsOIK1UD9xvHDw0nlvu5vgZYVRJMDip3v6XEin3FVHOma1ms/wRH8lL08G7CQyJ5A77IePtAP5TvAQDzZvkhmObnGIvITUh2ha3Xq7rfIwmRkZ+f0mwX6ToP295upsZeu2r5RmSANYVx1zFTl3KpRCqf80kboLK/eUVHKuDKaT0csmFBUzHTa8cxIplTXBHKecOo9tS7ekGxsVoBIWGKIdS7DfoFOZdsdemFo1xQXBfclus3aI8UoBkRni9rHEsxyJEuJmmnEWn9RmQ1ayFBioIwSU+JnaCzCSljC0BkxBb9T+EaGdjw/ags0C7RO7XqT1PEs8C+9U0sY6zQwU0NSN2ek72Mu57cKnodcgj7s6Oe8apTt48nVPtLjQfpuOEwcksmWii89bo7PldHjRHaP2i3HnahBpHViTTs/R9Ne8HDcLGZOuf+87Z8tc5d6IYJrJBmZFS+mZA3JRRfOYyWhJvRWcOrCvD7jo+wvohTL8XHgCQ1/9gES4+UzAVD9NtbhyRI+trcouMLsaeYGDA0WugS6BT89kFQnRDVSSfne9vLUsynAqKft9XIXfCk7dRLAt13KrdFRmAhak9gbNzvpKBPJTVVz24Jfi6WeDgQPTuwOINlQ5nYhBBFj86VrHEjjey836XzhHkVUDzhIeRaSiBfu22hE6MDcsBfLXDANbQaq1ZZPtiv7rC4zHyI4tvPukX6cW23nh+u2UEKDQltTnPW8ccO7Z/gLn+d/4qj0dr0IOuVA4TpuqRus2/5IdAn/5BFgDTy2TC0JC1hPYYbGEr6udoNOhDkSUNwzU+nRk8Se7kGWKWjbyrHoKyclOjpvJ4wqDnG5mFAnusNObggh1li0nctz+OTmgqwuw2EpeoRYL76X9rKIFEU0iOSm0MkMjLc9hk4arDfgg7HUD9oKblklEbDA1Rn0XGLd2tl6y4TPkp0jy9trMq0l9UqbNRJ9xw==,iv:07MRsBGq78bir1JrBqDlndJpw6lm6ZSYzHrubKaYPSI=,tag:f2CIV3KswfY0nPDekTHBDA==,type:str]",
+	"data": "ENC[AES256_GCM,data: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,iv:3zx8XwMPKUyw2uTcl57QvovIMZa2TMfeiZluBA3owwQ=,tag:6ECJ2LAt4cU3jcWtG6/yng==,type:str]",
 	"sops": {
 		"kms": null,
 		"gcp_kms": null,
@@ -11,10 +11,10 @@
 				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBud05zMk9qQUVCTzVSUnI3\nc0tZeWxpUUwwVDVsSk9HclVlYURWVUJoT0h3CkxIT3FHZHJSblhCTnpDRXF6RGJr\nT244RmNkcVpoMkZDZlovdXRJVEJvSGsKLS0tIGlpd2NObk1KMnVDeG9TWGhoM09T\nMlc3czcwcEVSNTZQSjZjRTY5VFBEVEUKRSSfEngajUtIDLnH/4PMr3Qe4SsnPgIf\nWBuwhGtxFTMwkzrJAXmkG1gzdpL4DGNP6uec6l6kd72jSuAXEwqDvA==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2024-06-23T18:08:33Z",
-		"mac": "ENC[AES256_GCM,data:lUkYM0UrpN+BiMqmsA3TTLZnhbnoL8noFgWfH1UgeSqp5keS+Ye/eX5Hmug/9I/wMNAJxB0RTW7UbtpLlugDxEZuEhe3Ubs3MnBn0oGn3uSIIASieYuosfNyfPX3yy8gpASAcsq6MvrdoTpM6cnQ9RQi7C3SFTR9tdglq9kjK54=,iv:+3f74u1bmh/E0WyaEtpfW4yIWUyUfuJdeSpQKLkRIUs=,tag:UvTvszgPvXT5Bgnt7FTTRg==,type:str]",
+		"lastmodified": "2024-08-25T05:48:20Z",
+		"mac": "ENC[AES256_GCM,data:i0ExMZfhdrPbsZQ52Cxxo/6qjlO5B/4NiCWJkOhQ4fCcRqNv3rlWity7ByXR5AQLacDyaer6S3fEKbZ/Gqn7qdo0Jeu0H8w4OD2l/bf4GBWcrcNoBvXzQXp03uL1plzKLBOLHqJR2c6dtvD0MA6VMjGZ6tiJl2yrayGceWLN9Pg=,iv:qNRJL0fo8Dege0FoVxB27k9vm0A/2XAGFDR5lbKwjYI=,tag:vzyboRGYpsqRk0bAst+EBQ==,type:str]",
 		"pgp": null,
 		"unencrypted_suffix": "_unencrypted",
-		"version": "3.8.1"
+		"version": "3.9.0"
 	}
 }
diff --git a/kubernetes/clusters/snikt/variables.tf b/kubernetes/clusters/snikt/variables.tf
@@ -14,13 +14,12 @@ variable "cluster_ca_certificate" {
   type = string
 }
 
-# variable "registry_server" {
-#   type = string
-# }
-#
-# variable "registry_username" {
-#   type = string
-# }
-# variable "registry_password" {
-#   type = string
-# }
+variable "registry_server" {
+  type = string
+}
+variable "registry_username" {
+  type = string
+}
+variable "registry_password" {
+  type = string
+}
diff --git a/kubernetes/clusters/snikt/z-backup/deployment_harbor.tf.bak b/kubernetes/clusters/snikt/z-backup/deployment_harbor.tf.bak
diff --git a/kubernetes/z-unused/deployments/harbor/README.md b/kubernetes/z-unused/deployments/harbor/README.md