update images for registry and cicd modules and add ability to set registry mirrors for orchestrator

kubespray/inventory/group_vars/k8s_cluster/addons.yml

@@ -4350,7 +4350,7 @@ releases:
   
       portal:
         image:
-          repository: harbor.kvazaric.ru/kube-forge/harbor-portal
+          repository: harbor.kvazaric.ru/kube-forge/goharbor/harbor-portal
           tag: v2.10.1
         serviceAccountName: ""
         automountServiceAccountToken: false
@@ -4365,7 +4365,7 @@ releases:
   
       core:
         image:
-          repository: goharbor/harbor-core
+          repository: harbor.kvazaric.ru/kube-forge/goharbor/harbor-core
           tag: v2.10.1
         serviceAccountName: ""
         automountServiceAccountToken: false
@@ -4403,7 +4403,7 @@ releases:
   
       jobservice:
         image:
-          repository: goharbor/harbor-jobservice
+          repository: harbor.kvazaric.ru/kube-forge/goharbor/harbor-jobservice
           tag: v2.10.1
         serviceAccountName: ""
         automountServiceAccountToken: false
@@ -4432,12 +4432,12 @@ releases:
       registry:
         registry:
           image:
-            repository: goharbor/registry-photon
+            repository: harbor.kvazaric.ru/kube-forge/goharbor/registry-photon
             tag: v2.10.1
           extraEnvVars: []
         controller:
           image:
-            repository: goharbor/harbor-registryctl
+            repository: harbor.kvazaric.ru/kube-forge/goharbor/harbor-registryctl
             tag: v2.10.1
           extraEnvVars: []
         serviceAccountName: ""
@@ -4481,7 +4481,7 @@ releases:
       trivy:
         enabled: true
         image:
-          repository: goharbor/trivy-adapter-photon
+          repository: harbor.kvazaric.ru/kube-forge/goharbor/trivy-adapter-photon
           tag: v2.10.1
         serviceAccountName: ""
         automountServiceAccountToken: false
@@ -4500,7 +4500,7 @@ releases:
         type: internal
         internal:
           image:
-            repository: goharbor/harbor-db
+            repository: harbor.kvazaric.ru/kube-forge/goharbor/harbor-db
             tag: v2.10.1
           serviceAccountName: ""
           automountServiceAccountToken: false
@@ -4559,7 +4559,7 @@ releases:
         type: internal
         internal:
           image:
-            repository: goharbor/redis-photon
+            repository: harbor.kvazaric.ru/kube-forge/goharbor/redis-photon
             tag: v2.10.1
           serviceAccountName: ""
           automountServiceAccountToken: false
@@ -4607,7 +4607,14 @@ releases:
       crds:
         install: true
   
+      global:
+        repository: quay.io/argoproj/argocd
+        tag: latest
+  
       server:
+        image:
+          repository: quay.io/argoproj/argocd
+          tag: latest
         certificateSecret:
           enabled: false
   
@@ -4617,12 +4624,23 @@ releases:
             enabled: true
   
       redis:
+        image:
+          repository: public.ecr.aws/docker/library/redis
+          tag: 7.2.4-alpine
+        exporter:
+          enabled: true
+          image:
+            repository: public.ecr.aws/bitnami/redis-exporter
+            tag: 1.58.0
         metrics:
           enabled: true
           serviceMonitor:
             enabled: true
   
       controller:
+        image:
+          repository: quay.io/argoproj/argocd
+          tag: latest
         replicas: 1
         metrics:
           enabled: true
@@ -4630,12 +4648,18 @@ releases:
             enabled: true
   
       applicationSet:
+        image:
+          repository: quay.io/argoproj/argocd
+          tag: latest
         metrics:
           enabled: true
           serviceMonitor:
             enabled: true
   
       dex:
+        image:
+          repository: ghcr.io/dexidp/dex
+          tag: v2.38.0
         metrics:
           enabled: true
           ## check later
@@ -4643,12 +4667,18 @@ releases:
             enabled: false
   
       repoServer:
+        image:
+          repository: quay.io/argoproj/argocd
+          tag: latest
         metrics:
           enabled: true
           serviceMonitor:
             enabled: true
   
       notifications:
+        image:
+          repository: quay.io/argoproj/argocd
+          tag: latest
         metrics:
           enabled: true
           serviceMonitor:
@@ -4659,7 +4689,7 @@ releases:
           server.insecure: true
   
         secret:
-          argocdServerAdminPassword: $2a$10$HDBhVHGtL0vBIcjuOybKzuTkc/HVVuQhZ0QHa38ljyjjZPmAESxrW
+          argocdServerAdminPassword: $2a$10$Nlkv3tEZauAtWk8BUbloqujTETrG7n1rlJmRXJAxz4xiZRRRtgfO6
   
         repositories:
           # add default helm-repository from harbor
@@ -4783,7 +4813,7 @@ releases:
           # -- Repository to use
           repository: argoproj/argo-rollouts
           # -- Overrides the image tag (default is the chart appVersion)
-          tag: ""
+          tag: latest
           # -- Image pull policy
           pullPolicy: IfNotPresent
   
@@ -5132,8 +5162,8 @@ releases:
     release_state: "present"
     values:
       image:
-        repository: keelhq/keel
-        tag: null
+        repository: harbor.kvazaric.ru/kube-forge/keelhq/keel
+        tag: latest
         pullPolicy: Always
   
       # Enable insecure registries

kubespray/inventory/group_vars/k8s_cluster/k8s-cluster.yml

@@ -226,6 +226,33 @@ dns_domain: "{{ cluster_name }}"
 ## docker for docker, crio for cri-o and containerd for containerd.
 ## Default: containerd
 container_manager: containerd
+containerd_registries_mirrors:
+  - prefix: docker.io
+    mirrors:
+      - host: https://mirror.gcr.io
+        capabilities: ["pull", "resolve"]
+        skip_verify: false
+      - host: https://quay.io
+        capabilities: ["pull", "resolve"]
+        skip_verify: false
+
+## CRI-O registry mirrors setup
+crio_registries:
+  - prefix: docker.io
+    insecure: false
+    blocked: false
+    location: registry-1.docker.io
+    unqualified: false
+    mirrors:
+      - location: https://mirror.gcr.io
+        insecure: false
+      - location: https://quay.io
+        insecure: false
+
+## Docker registry mirrors setup
+docker_registry_mirrors:
+  - https://mirror.gcr.io
+  - https://quay.io
 
 # Additional container runtimes
 kata_containers_enabled: false