as first container registry 9 Project Harbor Project History 10 Open Source Stats Registry features include − Multi-tenant content signing and validation − Identity integration and role-based access Deployed in containers − Extends, manages, and integrates proven open source components 12 Key Features Architecture 13 13 API Routing Core Service (API/Auth/GUI) Image Registry Trusted Content threshold – Static analysis of vulnerability by inspecting filesystem of container image and indexing features in database – Prevent images from being pulled if they exceed threshold – Periodic scanning based

future Harbor Project History Harbor Community Harbor Users and Partners (selected) x x Main Features 6 Web Portal • Based on open source Clarity • Image operation full capabilities • Batch operations audit Distribution Policy • Based on content trust • Based on vulnerability • Based on RBAC Main Features （ Cont. ） 7 Vulnerability Scanning • Kinds of scanning policies • Elaborate scanning report Packaging Docker Kubernetes Cloud Foundry Deep dive Harbor through panel discussion! Q1: What other features harbor should provide? Q2: How does the Harbor architecture evolve? Q3: How to converge management

vSphere Integrated Containers. • Apache 2 license. • https://github.com/vmware/harbor/ 8 Key Features • User management & access control – RBAC: admin, developer, guest – AD/LDAP integration • Policy Scanning • Static analysis of vulnerability by inspecting filesystem of container image and indexing features in database. • Rescanning is needed only and only if new detectors are added. • Update vulnerability

Supporting • Helm Chart Repo • Deployments 8 Confidential � ©2018 VMware, Inc. OVERVIEW Main Features Architecture ���� 9 GUI�� ����Clarity�� ��������������� Restful API ���API���� Swagger API

Supporting • Helm Chart Repo • Deployments 8 Confidential � ©2018 VMware, Inc. OVERVIEW Main Features Architecture ���� 9 GUI�� ����Clarity�� ��������������� Restful API ���API���� Swagger API

Security • Intellectual property stays in organization • Access Control 13 Enterprise Oriented Features • User management & access control • RBAC: admin, developer, guest • AD/LDAP integration • Policy

2016 survey Private Registry • 便于集成到内部CI/CD系统中； • 对镜像更灵活全面地掌控； • 数据传输性能更好； • 出于安全考虑。 vs. Features of • VMware中国团队开源的企业级镜像仓库项目，聚焦镜 像仓库的企业级需求： – 支持基于角色的访问控制RBAC； – 支持镜像复制策略（PUSH）； – 支持无用镜像数据的自动回收和删除；