expose harbor via dedicated lb on storage nodes

harbor/values.yaml

@@ -1,17 +1,21 @@
 expose:
-  type: ingress
+  type: loadBalancer
   tls:
     enabled: true
-  ingress:
-    hosts:
-      core: harbor.k-space.ee
+    certSource: secret
+    secret:
+      secretName: "harbor-ingress"      
+  loadBalancer:
+    name: harbor
+    ports:
+      httpPort: 80
+      httpsPort: 443
     annotations:
       cert-manager.io/cluster-issuer: default 
-      kubernetes.io/ingress.class: traefik
-      traefik.ingress.kubernetes.io/router.entrypoints: websecure
-      traefik.ingress.kubernetes.io/router.tls: "true"
-      external-dns.alpha.kubernetes.io/target: traefik.k-space.ee    
+      external-dns.alpha.kubernetes.io/hostname: harbor.k-space.ee
+      metallb.universe.tf/address-pool: elisa
     labels: {}
+    sourceRanges: []
 
 externalURL: https://harbor.k-space.ee
 
@@ -139,3 +143,49 @@ redis:
     addr: "dragonfly:6379"
     username: ""
     password: "MvYcuU0RaIu1SX7fY1m1JrgLUSaZJjge"
+
+nginx:
+  nodeSelector:
+    dedicated: storage
+  tolerations:
+    - key: dedicated
+      operator: Equal
+      value: storage
+      effect: NoSchedule
+
+portal:
+  nodeSelector:
+    dedicated: storage
+  tolerations:
+    - key: dedicated
+      operator: Equal
+      value: storage
+      effect: NoSchedule
+
+core:
+  nodeSelector:
+    dedicated: storage
+  tolerations:
+    - key: dedicated
+      operator: Equal
+      value: storage
+      effect: NoSchedule
+
+
+jobservice:
+  nodeSelector:
+    dedicated: storage
+  tolerations:
+    - key: dedicated
+      operator: Equal
+      value: storage
+      effect: NoSchedule
+
+registry:
+  nodeSelector:
+    dedicated: storage
+  tolerations:
+    - key: dedicated
+      operator: Equal
+      value: storage
+      effect: NoSchedule