-
Notifications
You must be signed in to change notification settings - Fork 4.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Feature Request] Harbor as combined registry and registry mirror #6894
Comments
Another use case for PKS encountered at several customers. Internal customer registries are often not using certificates (not a best practice, but simplifies internal registry use). Since PKS does not allow to connect to such registries (i.e. not using certificates) it is necessary to change the |
Hi @tschwaller – good to hear from you. PKS? What's that? 😉 This is definitely on the radar; take a look at goharbor/community#40. |
👍 Waiting for this.. |
Transfer all the requirements to @xaleeks for tracking. |
This would be really awesome :-)
That's just what we need in our (pretty restricted enterprise) environment.
Definitely useful. Our IT-Security would want to have a way to whitelist images that are allowed so people can't just pull everything. But I a agree that is a second step. |
related to #8082 |
@tschwaller Tom, we are tackling this in v2.1. Please track the ticket Michael linked, and I will share the prd with you as well if you want to add some more requirements |
I second this requirement. Anything else will make Docker+Harbor painful in big corporate companies that require both caching and a local registry simultaneously. |
If you configure Harbor as a local registry mirror, then it only acts as a mirror server and no longer accepts image pushing requests. As an administrator I would like to be able to use a single Harbor instance for both use cases.
The Harbor registry could then be configured as gatekeeper, i.e. as the only allowed registry to pull images from. Images from the Internet would be automatically scanned by Harbor and disallowed to be pulled according to CVE severity level. One would also avoid downloading images and pushing them to Harbor all the time just to get them scanned, since this is now a fully automated process.
Harbor should be configurable as local registry mirror for several external registries (not just one). In a first step all needed images are cached, but in a second step one should be able to configure which images can be used (e.g. per project, using regular expressions, using Quota limits, etc.).
The text was updated successfully, but these errors were encountered: