Upstream/harbor
1
0
Fork 0
mirror of https://github.com/goharbor/harbor.git synced 2025-02-19 21:32:24 +01:00
Code Issues Projects Releases Wiki Activity

Fix internal tls config upgrade issue

Browse Source 
internal tls config upgrade is not included in template, this pr is to add it.

Signed-off-by: DQ <dengq@vmware.com>
This commit is contained in:
DQ 2020-09-22 19:37:44 +08:00 committed by Ziming
parent f6a9d57765
commit 184e89365b
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
make/photon/prepare/migrations/version_2_1_0/harbor.yml.jinja
View File

@ -33,12 +33,20 @@ https:
# private_key: /your/private/key/path # private_key: /your/private/key/path
{% endif %} {% endif %}
# # Uncomment following will enable tls communication between all harbor components {% if internal_tls is defined %}
# Uncomment following will enable tls communication between all harbor components
internal_tls:
# set enabled to true means internal tls is enabled
enabled: {{ internal_tls.enabled | lower }}
# put your cert and key files on dir
dir: {{ internal_tls.dir }}
{% else %}
# internal_tls: # internal_tls:
# # set enabled to true means internal tls is enabled # # set enabled to true means internal tls is enabled
# enabled: true # enabled: true
# # put your cert and key files on dir # # put your cert and key files on dir
# dir: /etc/harbor/tls/internal # dir: /etc/harbor/tls/internal
{% endif %}
# Uncomment external_url if you want to enable external proxy # Uncomment external_url if you want to enable external proxy
# And when it enabled the hostname will no longer used # And when it enabled the hostname will no longer used
@ -144,7 +152,7 @@ clair:
trivy: trivy:
# ignoreUnfixed The flag to display only fixed vulnerabilities # ignoreUnfixed The flag to display only fixed vulnerabilities
{% if trivy.ignore_unfixed is defined %} {% if trivy.ignore_unfixed is defined %}
ignore_unfixed: {{ trivy.ignore_unfixed }} ignore_unfixed: {{ trivy.ignore_unfixed | lower }}
{% else %} {% else %}
ignore_unfixed: false ignore_unfixed: false
{% endif %} {% endif %}
@ -154,14 +162,14 @@ trivy:
# If the flag is enabled you have to manually download the `trivy.db` file and mount it in the # If the flag is enabled you have to manually download the `trivy.db` file and mount it in the
# /home/scanner/.cache/trivy/db/trivy.db path. # /home/scanner/.cache/trivy/db/trivy.db path.
{% if trivy.skip_update is defined %} {% if trivy.skip_update is defined %}
skip_update: {{ trivy.skip_update }} skip_update: {{ trivy.skip_update | lower }}
{% else %} {% else %}
skip_update: false skip_update: false
{% endif %} {% endif %}
# #
# insecure The flag to skip verifying registry certificate # insecure The flag to skip verifying registry certificate
{% if trivy.insecure is defined %} {% if trivy.insecure is defined %}
insecure: {{ trivy.insecure }} insecure: {{ trivy.insecure | lower }}
{% else %} {% else %}
insecure: false insecure: false
{% endif %} {% endif %}