minikube start

minikube addons enable ingress

kubectl get pods -n ingress-nginx

minikube ip

<minikube ip> harbor.example.com demo.example.com

ansible-galaxy collection install community.crypto
ansible-galaxy collection install kubernetes.core

mkdir certs

- name: Generate certificates and create Secrets
  hosts: localhost
  tasks:
    - name: Create certs directory
      file:
        path: ./certs
        state: directory

    - name: Generate private key for Harbor
      community.crypto.openssl_privatekey:
        path: ./certs/harbor.key

    - name: Generate self-signed certificate for Harbor
      community.crypto.x509_certificate:
        path: ./certs/harbor.crt
        privatekey_path: ./certs/harbor.key
        provider: selfsigned
        subject:
          commonName: harbor.example.com

    - name: Create Kubernetes Secret for Harbor TLS
      kubernetes.core.k8s:
        state: present
        definition:
          apiVersion: v1
          kind: Secret
          metadata:
            name: harbor-tls
            namespace: default
          type: kubernetes.io/tls
          data:
            tls.crt: "{{ lookup('file', './certs/harbor.crt') | b64encode }}"
            tls.key: "{{ lookup('file', './certs/harbor.key') | b64encode }}"

    - name: Generate private key for demo
      community.crypto.openssl_privatekey:
        path: ./certs/demo.key

    - name: Generate self-signed certificate for demo
      community.crypto.x509_certificate:
        path: ./certs/demo.crt
        privatekey_path: ./certs/demo.key
        provider: selfsigned
        subject:
          commonName: demo.example.com

    - name: Create Kubernetes Secret for demo TLS
      kubernetes.core.k8s:
        state: present
        definition:
          apiVersion: v1
          kind: Secret
          metadata:
            name: demo-tls
            namespace: default
          type: kubernetes.io/tls
          data:
            tls.crt: "{{ lookup('file', './certs/demo.crt') | b64encode }}"
            tls.key: "{{ lookup('file', './certs/demo.key') | b64encode }}"

ansible-playbook generate_certs.yaml

helm repo add harbor https://helm.goharbor.io
helm repo update

expose:
  type: ingress
  ingress:
    hosts:
      core: harbor.example.com
    annotations:
      core:
        kubernetes.io/ingress.class: nginx
  tls:
    enabled: true
    secretName: harbor-tls
externalURL: https://harbor.example.com
harborAdminPassword: "mysecretpassword"

helm install harbor harbor/harbor -f values.yaml

kubectl get pods

const express = require('express');
const app = express();
app.get('/', (req, res) => res.send('Hello from demo app!'));
app.listen(3000, () => console.log('Demo app listening on port 3000'));

{
  "name": "demo-app",
  "version": "1.0.0",
  "dependencies": {
    "express": "^4.17.1"
  }
}

FROM node:14
WORKDIR /app
COPY package*.json ./
RUN npm install
COPY . .
EXPOSE 3000
CMD ["node", "app.js"]

docker login harbor.example.com -u admin -p mysecretpassword

docker build -t harbor.example.com/library/demo-app:latest .

docker push harbor.example.com/library/demo-app:latest

apiVersion: apps/v1
kind: Deployment
metadata:
  name: demo-app
spec:
  replicas: 1
  selector:
    matchLabels:
      app: demo-app
  template:
    metadata:
      labels:
        app: demo-app
    spec:
      containers:
      - name: demo-app
        image: harbor.example.com/library/demo-app:latest
        ports:
        - containerPort: 3000

apiVersion: v1 
kind: Service
metadata:
  name: demo-service
spec:
  selector:
    app: demo-app
  ports:
    - protocol: TCP
      port: 80
      targetPort: 3000

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: demo-ingress
annotations:
kubernetes.io/ingress.class: nginx
spec:
tls:
- hosts:
- demo.example.com
secretName: demo-tls
rules:
- host: demo.example.com
http:
 paths:
 - path: /
   pathType: Prefix
   backend:
     service:
       name: demo-service
       port:
         number: 80

kubectl apply -f deployment.yaml
kubectl apply -f service.yaml
kubectl apply -f ingress.yaml