Harbor Registry Using a Harbor registry, you can host container images in a local, private Docker registry. Harbor is an extension of the basic Docker registry that implements access controls, identity connect to a Harbor Registry to retrieve container images on other systems. This chapter contains the following topic: • Using Harbor Registry in Tenant Clusters, on page 1 • Using Harbor Chartmuseum Chartmuseum in Tenant Clusters, on page 2 Using Harbor Registry in Tenant Clusters Follow these steps to create a new tenant cluster with access to the Harbor registry: Step 1 Obtain the Ingress Root CA Certificate

1 Harbor James Zabala Maintainer Harbor Focus Harbor is a trusted cloud native registry that stores, signs, and scans content. The mission is to provide cloud native environments the ability to confidently 2 Introduction to Harbor 3 Image Consistency 4 Image Security 5 Image Distribution 6 Registry Robustness / High Availability 4 Agenda 1 Containers 101 2 Introduction to Harbor 3 Image Consistency and applying RBAC Lifecycle of Containers and Images Agenda 1 Containers 101 2 Introduction to Harbor 3 Image Consistency 4 Image Security 5 Image Distribution 6 Registry Robustness / High Availability

Harbor Deep Dive Open source trusted cloud native registry Henry Zhang, Chief Architect, VMware R&D China Steven Zou, Staff Engineer, VMware R&D China Nov. 2018 goharbor.io Initiated by VMware https://github.com/go harbor/harbor/ Apache 2.0 license An open source trusted cloud native registry project HARBOR More integrations in future Harbor Project History Harbor Community Harbor Users and Partners image and chart Harbor Architecture API Routing API Routing Core Service (API/Auth/GUI) Image Registry Trusted Content Vulnerability Scanning Job Service Admin Service Harbor components 3rd

Physical Infrastructure vRealize Suite NSX-T BOSH (K8s LCM) BOSH (cluster LCM) Kubernetes Harbor P K S 10 ©2018 VMware, Inc. PKS on VMware SDDC Rapidly deliver and operationalize next-generation notary, micro-segmentation Persistence, monitoring, operations 13 ©2018 VMware, Inc. Project Harbor Now a CNCF Project Container Registry for CNCF VMware’s donation to the Linux Foundation & CNCF

system to build task, user can do what they want based on the payload CI/CD Examples - Gitlab/Harbor/Jira Integration Event payload can be passed to build task if needed gitlab new merge request commits between two builds • Invoke Jira API to mark the status and add the build info • Call harbor API to add/remove label of image, can also lock the passed image Agenda • Our DevOps Expectations

optionally attach them to service accounts. 3.1.11.3 Tanzu vSphere with Tanzu embeds a central Harbor registry that can be enabled on the management cluster. Once configured, all downstream clusters

libgd license Portions copyright 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002 by Cold Spring Harbor Laboratory. Funded under Grant P41-RR02188 by the National Insti- tutes of Health. Portions copyright

libgd license Portions copyright 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002 by Cold Spring Harbor Laboratory. Funded under Grant P41-RR02188 by the National Institutes of Health. Portions copyright

libgd license Portions copyright 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002 by Cold Spring Harbor Laboratory. Funded under Grant P41-RR02188 by the National Institutes of Health. Portions copyright

libgd license Portions copyright 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002 by Cold Spring Harbor Laboratory. Funded under Grant P41-RR02188 by the National Institutes of Health. Portions copyright