feat(harbor): configure encryption key

harbor/config/values.harbor.yaml

@@ -1,9 +1,10 @@
 externalURL: https://registry.icb4dc0.de
+existingSecretSecretKey: harbor-encryption
 
 database:
   type: external
   external:
-    host: app-cluster-pooler-rw.postgres.svc
+    host: app-cluster-rw.postgres.svc
     username: harbor-twpkvp
     coreDatabase: harbor
     existingSecret: db-credentials-harbor

harbor/kustomization.yaml

@@ -29,6 +29,7 @@ images:
 resources:
   - resources/ns.yaml
   - config/secret.s3.yaml
+  - config/secret.encryption.yaml
   - resources/db/db.yaml
   - resources/db/user.yaml
   - resources/dragonfly/db.yaml

harbor/resources/http_routes.yaml

@@ -30,5 +30,27 @@ spec:
     - registry.icb4dc0.de
   rules:
     - backendRefs:
-        - name: harbor
+        - kind: Service
+          name: harbor-core
           port: 80
+      matches:
+        - path:
+            type: PathPrefix
+            value: "/api/"
+        - path:
+            type: PathPrefix
+            value: "/service/"
+        - path:
+            type: PathPrefix
+            value: "/v2/"
+        - path:
+            type: PathPrefix
+            value: "/c/"
+    - backendRefs:
+        - kind: Service
+          name: harbor-portal
+          port: 80
+      matches:
+        - path:
+            type: PathPrefix
+            value: "/"