harbor update

harbor/values.yaml

@@ -1,7 +1,11 @@
 expose:
   type: ingress
   tls:
+    # harbor helm needs PR to use non-core-host-named tls (wildcard), like *.k-space.ee; currently it gets its own cert (harbor.k-space.ee)
     enabled: true
+    certSource: secret
+    secret:
+      secretName: wildcard-tls
   ingress:
     hosts:
       core: harbor.k-space.ee
@@ -10,7 +14,7 @@ expose:
       kubernetes.io/ingress.class: traefik
       traefik.ingress.kubernetes.io/router.entrypoints: websecure
       traefik.ingress.kubernetes.io/router.tls: "true"
-      external-dns.alpha.kubernetes.io/target: traefik.k-space.ee    
+      external-dns.alpha.kubernetes.io/target: traefik.k-space.ee
     labels: {}
 
 externalURL: https://harbor.k-space.ee
@@ -118,6 +122,8 @@ metrics:
 
 trivy:
   enabled: false
+notary:
+  enabled: false
 
 database:
   type: "external"