Harbor Registry Using a Harbor registry, you can host container images in a local, private Docker registry. Harbor is an extension of the basic Docker registry that implements access controls, identity Kubernetes resources can connect to a Harbor Registry to retrieve container images on other systems. This chapter contains the following topic: • Using Harbor Registry in Tenant Clusters, on page 1 • Using in Tenant Clusters, on page 2 Using Harbor Registry in Tenant Clusters Follow these steps to create a new tenant cluster with access to the Harbor registry: Step 1 Obtain the Ingress Root CA Certificate

vkalavri@bu.edu Spring 2020 3/17: High availability, recovery semantics, and guarantees Vasiliki Kalavri | Boston University 2020 Today’s topics • High-availability and fault-tolerance in distributed state consists of • input queues • operator state • output queues • Short recovery time • High runtime overhead • The checkpoint interval determines the trade-off 14 Ni primary secondary state consists of • input queues • operator state • output queues • Short recovery time • High runtime overhead • The checkpoint interval determines the trade-off 14 Ni primary secondary

容器镜像仓库（Registry） 为 OpenShift Container Platform 配置容器镜像仓库（Registry） Last Updated: 2023-04-19 OpenShift Container Platform 4.8 容器镜像仓库（Registry） 为 OpenShift Container Platform 配置容器镜像仓库（Registry） 法律通告 respective owners. 摘要 摘要 本文档提供有关为 OpenShift Container Platform 配置和管理内部 registry 的说明。它还介绍了与 OpenShift Container Platform 相关的 registry 的一般信息。 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . PLATFORM REGISTRY 概述 概述 1.1. OPENSHIFT CONTAINER PLATFORM REGISTRY 常用术语表 1.2. 集成的OPENSHIFT CONTAINER PLATFORM REGISTRY 1.3. 第三方 REGISTRY 1.4. RED HAT QUAY REGISTRIES 1.5. 启用了身份验证的红帽 REGISTRY 第 第 2 章

容器镜像仓库（Registry） 为 OpenShift Container Platform 配置容器镜像仓库（Registry） Last Updated: 2024-02-17 OpenShift Container Platform 4.12 容器镜像仓库（Registry） 为 OpenShift Container Platform 配置容器镜像仓库（Registry） 法律通告 respective owners. 摘要 摘要 本文档提供有关为 OpenShift Container Platform 配置和管理内部 registry 的说明。它还介绍了与 OpenShift Container Platform 相关的 registry 的一般信息。 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 章 章 OPENSHIFT 镜 镜像 像 REGISTRY 概述 概述 1.1. OPENSHIFT 镜像 REGISTRY 常用术语表 1.2. 集成的 OPENSHIFT 镜像 REGISTRY 1.3. 第三方 REGISTRY 1.4. RED HAT QUAY REGISTRIES 1.5. 启用了身份验证的红帽 REGISTRY 第 第 2 章 章 OPENSHIFT CONTAINER

Project Harbor Introduction Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff Engineer, VMware R&D China Nov. 2018 2 Confidential � ©2018 SVT Verify Registry Registry Registry Registry UT Build Commit Environment image image image image Image Management through Pipeline Distributions Multiple teams Multiple roles Availability Security Chart�� Helm Chart�� ������������� Harbor�� API Routing Core Service (API/Auth/GUI) Image Registry Trusted Content Vulnerability Scanning Job Service Admin Service Harbor components 3rd

Project Harbor Introduction Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff Engineer, VMware R&D China Nov. 2018 2 Confidential � ©2018 SVT Verify Registry Registry Registry Registry UT Build Commit Environment image image image image Image Management through Pipeline Distributions Multiple teams Multiple roles Availability Security Chart�� Helm Chart�� ������������� Harbor�� API Routing Core Service (API/Auth/GUI) Image Registry Trusted Content Vulnerability Scanning Job Service Admin Service Harbor components 3rd

Harbor Deep Dive Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff Engineer, VMware R&D China Nov. 2018 goharbor.io Initiated by VMware https://github.com/go harbor/harbor/ Apache 2.0 license An open source trusted cloud native registry project HARBOR More integrations in future Harbor Project History Harbor Community Harbor Kinds of scanning policies • Elaborate scanning report Content Trust • Digital signature High Availability • HA support Helm Chart Support • Helm Chart repository • Same mechanism and user experiences

reserved. 采用开源Harbor Registry实现高效安全的容 器镜像运维 姜坦 VMware中国研发中心资深研发工程师 Runtime Package Cluster 开场 1 镜像运维 2 开源企业级镜像仓库-Harbor 3 集成Harbor 4 总结 议程 4 Registry 镜像 Images Push Push Pull • 镜像存储仓库 • 分发镜像的媒介 • 访问控制和镜像管理较佳节点 Registry – 镜像管理的重要部件 • 基础镜像 ubuntu:latest 可能在不同构建时间会有差别 • 即使 ubuntu:14.04 也可能会有改变（补丁不同） • apt-get (curl, wget..) 无法保证安装同样的软件包 • ADD 依赖构建时候的文件 定期更新漏洞数据库 安全考虑 镜像分发 9 • 容器镜像通常从registry分发 • 在大规模集群场景下，Registry 是镜像分发瓶颈 – I/O – 网络带宽 • 扩展 registry 服务 – 多实例 registry 共享存储 – 多实例 registry 不共享存储 1 镜像运维 2 开源企业级镜像仓库-Harbor

2017 VMware Inc. All rights reserved. ��Harbor�����Registry������ ����� ��� VMware���������� ���� • VMware�������������������� • Harbor�������Registry����� • Cloud Foundry������������� • ������� • Distribution 6 High Availability of Registry Agenda 1 Container Image Basics 2 Project Harbor Introduction 3 Consistency of Images 4 Security 5 Image Distribution 6 High Availability of Registry Lifecycle Stop Start Restart Run Commit Dockerfile Build tag tar archive Save Load Push Registry Images Pull Registry Images 6 Push Pull • Repository for storing images • Intermediary for shipping

1 Harbor James Zabala Maintainer Harbor Focus Harbor is a trusted cloud native registry that stores, signs, and scans content. The mission is to provide cloud native environments the ability to confidently Distribution 6 Registry Robustness / High Availability 4 Agenda 1 Containers 101 2 Introduction to Harbor 3 Image Consistency 4 Image Security 5 Image Distribution 6 Registry Robustness / High Availability Run Commit Dockerfile Build tag tar archive Save Load Push Registry Images Pull Lifecycle of Containers and Images Registry Images 7 Push Pull • Repository for storing images • Intermediary