harbor_ansible_role

one_mind.harbor_ansible_role

Ansible role to deploy Harbor registry server and manage users, projects and members.

Role Variables

harbor_hostname - This var must be overwritten, because by default it localhost, but Harbor can't work on that hostname.

harbor_admin_password and harbor_db_password must be overwritten to :)

harbor_config_dir - place where harbor installation scripts and docker-compose.yml will be stored.

harbor_http_port - http port

harbor_remote_certificate_dir and harbor_remote_private_key_dir dirs where certificates for harbor stored.

harbor_users - list of users to be created

username
email
password
realname
comment

harbor_projects - list of projects to be created

project_name
public (true/false)

harbor_members - list of members in projects to be created

project (existing project)
role_id (1/2/3)
username (existing user)

harbor_get_users - get all users in harbor

harbor_get_projects - get all projects

harbor_get_members - get all members in project

project_id (project name or id)

harbor_remove_users - list of users ids to be removed

user_id

harbor_remove_members - list of members to be removed from project

project_id member_id

harbor_remove_projects - list of projects to be removed

project_id

Example Playbook

- hosts: servers
  roles:
      - one_mind.harbor_ansible_role
  vars:
  
    # create
    harbor_projects:
      - project_name: "firstproject"
        public: "true"
      - project_name: "secondproject"
        public: "false"
    harbor_members: 
      - project: "firstproject"
        role_id: 1
        username: "user_one"
      - project: "secondproject"
        role_id: 2
        username: "second_one"
    harbor_users:
      - username: "user_one"
        email: "[email protected]"
        password: "harboruser12345"
        realname: "user one"
        comment: "void"
      - username: "second_one"
        email: "[email protected]"
        password: "harboruser12345"
        realname: "user two"
        comment: "void"
        
    # get
    harbor_get_users: yes
    harbor_get_projects: yes
    harbor_get_members:
      - project_id: firstproject
      - project_id: secondproject
    
    # remove
    harbor_remove_users:
      - user_id: 1
      - user_id: 2
    harbor_remove_members:
      - project_id: 1
        member_id: 1
      - project_id: 2
        member_id: 2
    harbor_remove_projects:
      - project_id: 1
      - project_id: 2