Dare2python/k8s-harbor

Harbor in Kubernetes

Kubernetes + Harbor

Harbor is an open source cloud native registry that stores, signs, and scans container images for vulnerabilities.

Harbor solves common challenges by delivering trust, compliance, performance, and interoperability. It fills a gap for organizations and applications that cannot use a public or cloud-based registry, or want a consistent experience across clouds.

• Demo GitHub repository: https://github.com/ruzickap/k8s-harbor
• Demo Web Pages: https://ruzickap.github.io/k8s-harbor
• Presentation git repository: https://github.com/ruzickap/k8s-harbor-presentation
• Presentation URL: https://ruzickap.github.io/k8s-harbor-presentation
• Asciinema screencast: https://asciinema.org/a/253519

Requirements

• ansible
• awscli
• AWS IAM Authenticator for Kubernetes
• AWS account
• kubectl
• eksctl
• Kubernetes, Docker, Linux, AWS knowledge required

Objectives

• Download and install Harbor to your Kubernetes cluster

Lab Architecture

Content

• Part 01 - Create EKS cluster
• Part 02 - Install Helm
• Part 03 - ingress-nginx + cert-manager installation
• Part 04 - Harbor installation
• Part 05 - Initial Harbor tasks
• Part 06 - Harbor and Helm charts
• Part 07 - Harbor and container images
• Part 08 - Project settings
• Part 09 - Clean-up

Links

• Video:

  • Intro to Harbor
  • Intro: Harbor - James Zabala & Henry Zhang, VMware
  • Deep Dive: Harbor - Tan Jiang & Jia Zou, VMware

• Pages:

  • Deploying Harbor Container Registry in Production
  • How to install and use VMware Harbor private registry with Kubernetes
  • Set up your cluster to use a private Docker image registry
  • Use the Notary client for advanced users
  • Signing Docker images with Notary server
  • Handy API Harbor calls (in Chinese)
  • Swagger Editor + Import Harbor's swagger.yaml