python-harborclient/config.yml at main · osism-archive/python-harborclient · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
---
# harbor api url and credentials.
api:
  url: https://harbor.services.osism.tech/api/v2.0
  username: foobar
  password: foobar
  # verfiy = check ssl or not
  verify: true

# this variable is unsed and rather for documentation of possible permissions.
available_permissions:
  - artifact:delete
  - artifact:list
  - artifact:read
  - artifact-label:create
  - artifact-label:delete
  - helm-chart-version-label:create
  - helm-chart-version-label:delete
  - helm-chart-version:create
  - helm-chart-version:delete
  - helm-chart:read
  - repository:delete
  - repository:list
  - repository:pull
  - repository:push
  - scan:create
  - scan:stop
  - tag:create
  - tag:delete
  - tag:list

# list of harbor projects
projects:
  - project_name: "kolla"
    public: true
  - project_name: "osism"
    public: true

# list of robot accounts
robot_accounts:
  - name: github
    disable: False
    level: system
    duration: -1
    description: ""
    permissions:
      - kind: project
        namespace: "*"
        access_simplified:
          - artifact:list
          - artifact-label:create
          - repository:list
          - repository:pull
          - repository:push
          - scan:create
          - scan:stop
          - tag:create

# list of registries which should be connected to harbor (no replication yet)
registries:
  - credential:
      access_key: foo+bar
      access_secret: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
      type: basic
      # or oauth
    name: quay.io
    url: https://quay.io
    type: docker-registry
    # possible values of type:
    # quay-io
    # harbor
    # google-gcr
    # aws-ecr
    # azure-acr
    # ali-acr
    # gitlab
    # docker-registry
    # docker-hub
    # huawei-SWR
    # jfrog-artifactory
    # helm-hub
    description: ""

# list of replication rules
replication_rules:
  - description: ""
    dest_namespace_replace_conut: -1
    replicate_deletion: true
    filters:
      - type: "name"
        value: "kolla/**"
    name: "kolla"
    dest_registry: "quay.io"
    enabled: true
    dest_namespace: kolla
    trigger:
      type: "event_based"
    override: true
  - description: ""
    dest_namespace_replace_conut: -1
    replicate_deletion: true
    filters:
      - type: "name"
        value: "osism/**"
    name: "osism"
    dest_registry: "quay.io"
    enabled: true
    dest_namespace: osism
    trigger:
      type: "event_based"
    override: true