Harbor技术架构介绍

1、Harbor IntroHarbor技术架构介绍AgendaHarbor OverviewRoadmapNext: V1.9Highlights: V1.8Community12345OverviewFeaturesFundamentalOperationSecurityDeploymentMulti Backend Storages Multi ConsumersImage ManagementIdentity IntegrationsManagement PortalChart ManagementREST APICLI(Community)Distribution PolicyAcces

2、s LogVulnerability Scanning (Clair)Namespace IsolationAccess Control (RBAC)Content Trust (Notary)Health CheckOnline GCRobot AccountContent ReplicationOffline/Online InstallersHarbor ChartTypical Serving ScenarioRegion 1Region 2Region 3Kubernetes ClusterVMVMVMRuntimeRuntimeKubernetes Cluster VMVMVMRu

3、ntimeKubernetes Cluster VMVMVMRegistry Node 1Registry Node 2Registry Node 3Pull ImagesPull ImagesPull ImagesCode CommitsCode RepositoryOn-premise NodeBuild EnginePublishREPLICATIONTUNNEL K8S APICDDevQEStaging CIScan/TrustRepRepOverall Architecturekubeletdocker/notary clientConsumersWeb PortalFundame

4、ntal ServicesSQL DatabaseLocal / Remote Storage (block, file, object)Identity ProvidersAD/LDAPOIDCAPI RoutingCoreREST APIHelmPackagingOffline InstallerK8sHelm ChartAuthentication &AuthorizationConfigManagementNamespaceManagementReplicationChart ServiceScannerTrust HandlerGC Controller3rd Party Servi

5、cesDocker RegistryDockerOnline InstallerChart MuseumClairNotaryJob ServiceData Access Layerk-v storageLogsTill V1.8.0Highlights in V1.8Harbor V1.8.0 is GAed on May 21stAnnounced at KubeCon BarcelonaReplication NGDrivers SupportedDocker HubDocker DistributionV2 CompatibleHuawei Container Registry (SW

6、R)Drivers SupportingGCRECRACRAli-ACR85% code rewriteDesign RefactorPolicy BasedPull/Push ModeImage + ChartHarborNon-HarborTriggersFiltersFeature EnhancementsOIDCOpen ID SpecWeb SSOConfigurable ProvidersDocker CLI SecretVerified ProvidersMore Providers In FutureGoogle IdentityDexidp/dexPing FedrateEn

7、d User VerifiedKeycloakOther OpenID Compatible ProvidersMore New FeaturesRobot AccountPull/Push permsBenefit for CI/CDHealth CheckHealth API providedBenefit for monitoringDeploymentRefactor scriptsRefactor config managementAPI ExplorerCheck API via portalEasy for debuggingNext: V1.9V1.9 Release Plan

8、Quota Per ProjectWebhookRetention Policy (TTL)CVE WhitelistV1.9 | FC: August 5thGA: August 28th |/orgs/goharbor/projects/1#column-5411972RoadmapRoadmapHigh AvailabilityQuotasProxy CacheLogging EndpointPerf & ScaleAdvanced Access ControlInterrogation ServiceKubernetes OperatorManagementExtensibilityP

9、2P DistributionRepository Beyond image/HelmCommunityWere trying to build an open, fair, transparent and self- government community8100+USAChinaAustraliaItalySpainFranceSingaporeVietnamNicaragua14 Maintainers126 Contributors65+ Companies36+ CountriesIndiaCanadaUKSwedenSouth AfricaNew ZealandSource: c

10、f.ioKoreaJapanGlobal ContributionsBrazilRussiaUkraineBelarus Germany5 CompaniesEnd UserContributorMaintainerGitHub IssuesExperiences Community SharingMeetings1st CommitFix BugsProposalContributingGuideCommunity MeetingsGovernanceModelCommitsReviewsRelease PlansPresentations Host MeetingsGovernance ModelLevels of ParticipationWorkgroupsReplicationScanningNotificationLCMP2PMore ways to get involvedharbor-userscf.ioharbor-devcf.iocf.io#harbor#harbor-devproject_harborhttps:/demo.goharbor.ioUsername: adminPass