Deploy Harbor HA via BOSH (Planning) Packages BOSH Manifest/Tile (Instances) Jobs BOSH Release References Postgresql boshrelease Redis boshrelease Docker UAA Smoke Test BOSH dns Core Job Service Proxy/Router HAproxy Keepalived HAproxy Keepalived UAA Smoke BOSH dns Docker Core BOSH dns Docker Job Serv BOSH dns Docker Admin Ser BOSH dns Docker Log n n n n 31 Confidential � ©2018 VMware ©2018 VMware, Inc. Deploy Harbor via various ways Click to edit optional subtitle DOCKER COMPOSE BOSH RELEASE/TILE HELM CHART* NOTES: * HA deployment supported Website�https://github.com/goharbor/harbor

Deploy Harbor HA via BOSH (Planning) Packages BOSH Manifest/Tile (Instances) Jobs BOSH Release References Postgresql boshrelease Redis boshrelease Docker UAA Smoke Test BOSH dns Core Job Service Proxy/Router HAproxy Keepalived HAproxy Keepalived UAA Smoke BOSH dns Docker Core BOSH dns Docker Job Serv BOSH dns Docker Admin Ser BOSH dns Docker Log n n n n 31 Confidential � ©2018 VMware ©2018 VMware, Inc. Deploy Harbor via various ways Click to edit optional subtitle DOCKER COMPOSE BOSH RELEASE/TILE HELM CHART* NOTES: * HA deployment supported Website�https://github.com/goharbor/harbor

User Experience • Installation and clusters creation Deploy OpsMgr OVA Upload PKS tile Deploy BOSH pks create cluster A pks create cluster B Worker Worker Worker Kubernetes Master API Cluster Harbor • Manages Cluster Day 2 - Scaling - Patching - Upgrades - Failures Kubernetes (As a Bosh Release) BOSH (Deploys/Manages VMs) CPI CNI Harbor Private Container Registry Worker Worker Worker create-cluster K8s-2 n=3 #pks create-cluster K8s-3 n=3 #pks resize K8s-3 n=5 Architecture NSX-T Bosh PKS Admin Network NCP POD 1 POD 4 POD 2 POD 3 POD 5 POD 6 T0 kube-system PODs – Logical

Worker Pod Pod kube-cluster PKS API BOSH Ops Manager BOSH Director IaaS K8s API K8s API Platform Reliability Engineer Ops Manager / BOSH Admin Manages OpsMan Tiles Developer Kubernetes NameSpace NameSpace NameSpace NameSpace VMware PKS Broker UAA VMware PKS API BOSH CredHub ©2019 VMware, Inc. 15 PKS已經做好11大領域超過百項的安全強化措施 PKS對於容器底層核心(Stemcell)就做了非常多的安全強化並驗證

NSX-T BOSH (K8s LCM) BOSH (cluster LCM) Kubernetes Harbor P K S 10 ©2018 VMware, Inc. PKS on VMware SDDC Rapidly deliver and operationalize next-generation apps Physical Infrastructure BOSH NSX-T

安全性 VIC 服务引擎 存储虚拟化 计算虚拟化 网络虚拟化 Physical Infrastructure Kubernetes on BOSH (Kubo) BOSH NSX Analytics Automation Security Operations Monitoring GCP Service Broker

Same mechanism and user experiences with image management Multi Deployments • Docker Compose • BOSH/Pivotal Tile • Helm Chart Label • Label in project and system scopes • Mark labels to image and