Harbor Community Meetings

Harbor Community Meeting Agenda and Notes

This doc is meant to serve as the “one doc to rule them all” for Harbor community meetings and open discussions. You can find slides of previous meetings on GitHub. Visit the community details page for schedule, meeting recordings, and additional details. If you have anything you’d like to put on the agenda, please do so below for the next meeting:

June 29, 2022

Discussion Topics

• [Jiaolin Yang] - Release status update. 2.5.2 and 2.6
  Release Schedule of 2.6 shifted to a few days maybe one week. Probably in earlier August.
• [Daojun Zhang] - Demo audit log rotation
• [Vadim Bauer on behalf of Roger Klorese] - Deprecation Policy
  How to improve and standerdize the deprecation policiy See: issues/16607 and community proposal/193

Attendees

• Jiaolin (VMware)
• Vadim Bauer
• Shengwen Yu

June 15, 2022

Discussion Topics

• [Chenyu Zhang] - Demo cache layer
• Follow Up PR Review Process

Attendees

• Vadim
• Jiaolin
• Chenyu Zhang
• DaoJun Zhang
• Manogna
• Miner Yang
• Yan Wang

June 1, 2022

Attendees

• Orlin Vasilev (VMware)
• Vadim
• Jiaolin (VMware)
• Alexander Barth (Mercedes-Benz Group AG)

Status Updates

Discussion Topics

• Harbor release 2.5.1 - new release notes - https://github.com/goharbor/harbor/releases/tag/v2.5.1
• Recap KubeCon
• Labels (How many can we have?)
• How to improve pull requests
• Whats up with Zen Hub
• Pull Requests review
• Create a Deprecation Policy for Harbor - https://github.com/goharbor/harbor/issues/16607

May 4, 2022

Attendees

• Orlin Vasilev (VMware)
• Márk Sági-Kazár (Cisco ETI)
• Yan Wang (VMware)
• Diogo Guerra
• Max Xu
• POOJAS

Status Updates

• Orlix - a bit changed plan for the community meeting

Discussion Topics

• Orlix/Vadim - https://github.com/goharbor/harbor/pulls/SimonAlling
• https://github.com/goharbor/harbor/pull/16795
• Márk - https://github.com/goharbor/harbor-operator/issues/843
• Márk/Orlix - Operator roadmap and release dates

04/20/2022

• [Orlix] - Thanks to Jiaolin for hosting this meeting, I'm sorry not able to join(maybe)!
• [Orlix] - CNCF Maintainers survey
• [Orlix] - stale GH action - https://github.com/goharbor/harbor/pull/16699
• [Orlix] - New PR template is in place please try to use it properly
• [Orlix] - Check labels and easy release notes - https://github.com/goharbor/harbor/pull/16634
• [Orlix] - KubeCon NA open for CfP until 27 May - https://events.linuxfoundation.org/kubecon-cloudnativecon-north- america/program/cfp/#general-info - please coNsider submitting talk - I can help out! I will be there in person 95% :)
• [Jiaolin Yang] - Harbor v2.5.0 was released on 04/11/2022. Blog Introducing Cosign in Harbor v2.5.0
• [Jiaolin Yang] - v2.6 plan
  • 2.6 timeline is tentatively below.
    • Target FC: 01 Jul 2022
    • Target RC1: 11 Jul 2022
    • Target RC2: 18 Jul 2022
    • Target GA: 25 Jul 2022
  • Majorly focus on
    • Performance Improvement - 15937
    • Audit Log - 16721
    • System Artifact - 16525
    • Edge Registry investigation

04/06/2022

• [Orlix] - Notary Depreciation discussion - https://github.com/goharbor/harbor/discussions/16612
• [Orlix] - to review for v2.6
  • https://github.com/goharbor/community/pull/159
  • https://github.com/goharbor/harbor/issues/15937
  • https://github.com/goharbor/community/pull/190
  • https://github.com/goharbor/harbor/issues/15975
  • https://github.com/goharbor/harbor/issues/16001
  • https://github.com/goharbor/harbor/issues/16587
  • https://github.com/goharbor/harbor/issues/16525
  • https://github.com/goharbor/community/pull/181 - https://github.com/goharbor/harbor/issues/16525
  • https://github.com/goharbor/harbor/issues/14987
  • https://github.com/goharbor/harbor/issues/16397
  • https://github.com/goharbor/community/pull/167 -> Proposal: Image Acceleration(Apparate) #165 -> https://github.com/goharbor/acceleration-service
  • https://github.com/goharbor/harbor/issues/14552
  • https://github.com/goharbor/community/pull/159/files

--- TEMPLATE ---

03/23/2022

• [Orlix] - KubeCon EU 22 - in-person kiosk for afternoons volunteers wanted - SWAG ?
• [Orlix] - KubeCon EU 22 - virtual office hours - 10:30 - 11:15 CET, Wednesday, May 18, 2022
• [Orlix] - maintainer to open PR for me in here: https://github.com/cncf/foundation/blob/main/project-maintainers.csv (Tianon)
  • [Tianon] - https://github.com/cncf/foundation/pull/320
• [Orlix] - Roger Klorese as PM: https://github.com/goharbor/community/pull/191
• [Orlix] - Update on Postgres alternatives - please join channel WG : https://cloud-native.slack.com/archives/C037VBX8U57
• [Orlix] - Inactive Maintainers
• [Orlix] - Release date for v2.5 - TBA - due to CVEs ~end of March
• [Stone] - Introduce the purge and forward audit log proposal #190
• [Orlix] - KubeCon NA 22 - Detroit - CfP is open through Friday May 27, 2022 at 11:59 PM PDT
• [Orlix, Yan] - #harbor-conf https://cloud-native.slack.com/archives/C03844123UN channel in Slack - place to discuss only conference related topics - KubeCon,OSS Summit etc...- CfP,Maintainers Tracks, etc... - currently private will ne open soon by CNCF https://cncfservicedesk.atlassian.net/servicedesk/customer/portal/1/CNCFSD-1162

03/09/2022

• [Yvonnex] - Proposal 'Adapt Multiple Type of Database for Harbor' -- https://github.com/goharbor/community/pull/188
• [Orlix] - KubeCon EU Maintainers track accepted - please start prep - I can help if needed!
• [Orlix] - 2.5 Release in 2 days? - tentative March 21 - depends on Notary fix
• [Abbie] - Next SIG Docs meeting: 3/16 at 8am et
• [Orlix,Yan Wang] - Notary CVEs - https://nvd.nist.gov/vuln/detail/CVE-2022-23806 https://nvd.nist.gov/vuln/detail/CVE-2019-15562

02/23/2022

• [Orlin] - Welcome
• [Abbie & Orlin] - Announcing Harbor SIG Docs!
  • Intros & chat about the group goals
  • Brief Harbor overview
  • Docs tools and contributing
    • Github, Hugo
    • Website repo
  • Good first issues and projects
    • Localize Harbor interface - https://github.com/goharbor/harbor/issues/16321
    • Good first issues
    • Website issues - html, css, hugo related issues
• [Prahalad Deshpande] - Presention about the proposal: https://github.com/goharbor/community/pull/181
• Release update
  • [Abbie] - Can we move 3/11 release date?

26/01/2022 Recoding

• [Yan Wang] - Cosign integration demo
• [Orlix] - Harbor 2.5 release - date and announcement - Feb 11th - feature completion, March 11th - Release date!
• [Yan Wang] - Maintainers track KubeConEU'22
• [Abbie] - Announcement of the Technical Writing Working Group - After Chinese New Year celebrations

01/12/2022

• [Jiaolin] - 2.5 release postpone 2 weeks - March 11th
• [Orlin Vasilev] - FOSDEM 22 talk accepted Harbor - 101
• [Orlin Vasilev] - Collect 2.6 requirements - https://github.com/goharbor/harbor/discussions/16214

12/15/2021

• [Chenyu Zhang] - Proposal 'Asynchronous update of artifact's pull_time and pull_count' https://github.com/goharbor/community/pull/183
• [Orlin Vasilev] - Update on the GOVERNANECE.md - https://github.com/goharbor/community/pull/180
• [Orlin Vasilev] - FOSDEM CFP opened "devroom containers" KubeCon EU closes in 2 days
• [Orlin Vasilev] - Docs Working Group starting January!

12/01/2021

• [Stone Zhang] - Discuss issue https://github.com/goharbor/harbor/issues/15963
• [Chenyu Zhang] - Demo https://github.com/goharbor/perf/wiki/How-to-setup-a-monitoring-environment
• [Orlin Vasilev] - Peritus.io is added to the channels soon we can use it!
• [Orlin Vasilev] - FOSDEM CFP opened "devroom containers"
• [Orlin Vasilev] - Update on the GOVERNANECE.md - https://github.com/goharbor/community/pull/180
• [Vadim Bauer] - https://github.com/szlabs/harbor-automation-4k8s - maybe Steven Zou can share thoughts on that repo
• [Vadim Bauer] - https://github.com/container-registry/awesome-harbor

---

11/17/2021

• [Xianghui Feng/Zhaoyan Xu] - Arksec Scanner Adapter for Harbor Registry.
• [Orlin Vasilev] - Vadim Bauer promoted to maintainer! Hurray!
• [Orlin Vasilev] - Usage of [Peritus.AI] - https://github.com/goharbor/community/issues/179
• [Orlin Vasilev] - Conferences - KubeCon China/EU, FOSDEM - maintainers track
• [Orlin Vasilev] - maintainer
• [Orlin Vasilev] - swag!
• [Alex Xu] - 2.5 release - https://github.com/orgs/goharbor/projects/1 - release date Jan/Feb 2022

---

11/03/2021

• Orlin Vasilev - Office Hours
• Vadim Bauer - OIDC login issues; Harbor Edge

---

10/20/2021

• [Santhosh Srinivasan] - Peritus.AI: Community Intelligence Platform for Cloud Native Technologies
• [Orlin Vasilev] - Nominate Vadim Bauer for Maintainer

---

10/6/2021

• Cancelled: https://lists.cncf.io/g/harbor-users/message/230

---

9/22/2021

• [Jiaolin Yang] - v2.4 status update

---

9/8/2021

• [ Qian Deng ] - Demo 'Tracing'
• [ Shengwen Yu ] - Demo 'Stop Scan Job'

---

8/25/2021

• [ Ziming Zhang ] - Harbor Operator v1.2.0 plan
• [ Shengwen Yu ] - Proposal 'Stop scan job'; https://github.com/goharbor/community/pull/173
• [Alex Xu] - Nominate Tianon Gravi as New maintainer

---

8/11/2021

• [ Qian Deng ] - Proposal 'add tracing'; https://github.com/goharbor/community/pull/171
• [ Yan Wang ] - Proposal 'cosign integration'; https://github.com/goharbor/community/pull/172

---

7/28/2021

• [person presenting] - Topic + description
• [ Orlin Vasilev ] - New Orgs to Contribute; More often release notifications and process

---

7/14/2021

• [Alex Xu] - 2.4 plan and roadmap update
• [Daniel Jiang] - Talk about issue Harbor Version Upgrade from 2 to 2.2 Causing Key Issue
• [Daniel Morinigo from Alauda] - Update the status of Harbor ARM release.
• [Orlin Vasilev] - Streaming Community Meetings in YouTube?

6/30/2021

Harbor community meeting

• 2.3 release!

6/16/2021

Harbor community meeting

• Proposal:Image Acceleration(Apparate)
• PR: Robot account replication

6/2/2021

Harbor community meeting

• Proposal:Backup Hosting Harbor Images in TCR
• upcoming v2.3 release
• v2.4 feature requests

5/19/2021

Harbor community meeting

• Harbor Operator v1.0.0 brief introduction and next plan
• Proposal:Replication bandwidth limit

4/21/2021

Harbor community meeting

• Kubecon maintainers track session on May 5 - https://sched.co/iE6X
• Kubecon office hours on May 4/5/6
  • May 4, 2:00 PM (CEST): https://community.cncf.io/events/details/cncf-cncf-project-office-hours-presents-harbor-project-office-hours/
  • May 5, 2:00 PM (CEST): https://community.cncf.io/events/details/cncf-cncf-project-office-hours-presents-harbor-project-office-hours-1/
  • May 6, 2:15 PM (CEST): https://community.cncf.io/events/details/cncf-cncf-project-office-hours-presents-harbor-project-office-hours-2/
• Docs process Improvements. https://github.com/goharbor/harbor/issues/14590
• Proposal for build multi arch images. https://github.com/goharbor/community/pull/159

4/7/2021

Harbor community meeting

• JobService Metrics & Metrics dashboard sample
• kubecon maintainers track session on May 5
• Template PR https://github.com/goharbor/harbor/pull/14271
• Kubecon session - https://sched.co/iE6X

3/24/2021

Harbor community meeting

• declarative config
• nydus integration demo

3/10/2021

Harbor community meeting

• Jonas PR on project maintainer

We’re delighted to announce the general availability of Harbor v2.2. With notable features such as

• Multi-projects scoped robots
• Prometheus-driven telemetry
• Proxy caching capability extended to GCR, Quay.io, ECR, & ACR
• OIDC auth admin group support, achieving parity with LDAP auth
• Dell EMC ECS S3 storage support
• Aqua CSP Enterprise Scanner Integration
• Clair image scanner deprecated

2020 was a big year for Harbor, chock full of highlights including

• 1st VMware-originated project to graduate from CNCF; started in VMware Beijing R&D 2016
• Project stats as of today: 14.1k Github stars, 143 releases, 14 maintainers across 5 companies, 3.6k forks
• 1st OSS registry to fully support OCI specs
• 18 OSS releases in 2020
• 1st registry to support ML (Machine Learning) on K8s artifacts such as Kubeflow data models
• Proxy Cache capability producing significant savings by reducing the effect of Dockerhub’s rate limiting
• Harbor Operator delivering HA and superior Day 2 management capabilities
• Commercial products based on Harbor - VMware Tanzu Network Registry, OVH Cloud Registry, SUSE CaaS Registry, Tencent Enterprise Registry, Rancher Registry, Container-Registry.com & more
• Adopters running Harbor in production - JD.com, Tencent, Bytedance, Huawei, China Unicom, China Mobile, Intel, Dish Network, Salesforce, Agoda, TrendMicro & many more

If you’re a user of Harbor and want to share any feedback, we’d love to hear from you here

In 2021, the team will focus on

• Hardening the Harbor Operator; great hook for any company offering Harbor *aaS
• Harbor Lite for Edge: a lightweight registry serving workloads at edge nodes
• Increasing our involvement in Notary v2 upstream for better image provenance capabilities
• Increasing out involvement in Docker Distribution upstream
• Strengthening ecosystem partnerships
• Improving Security posturing
• Improving performance and scalability
• Releasing an ARM64-based Harbor Jonas PR on project maintainer

1/27/2021

• Introduction and demo: Harbor CLI by Hin Lam
  • Repo: https://github.com/hinyinlam-pivotal/harbor-cli
• Demo by XiangQian Li from TensorSecurity: new scanner adapter for Harbor

1/13/2021

• Demo: Shikhar Bajaj from VMware will share Harbor registry for mitigating against Dockerhub rate limiting

11/18/2020

• Proposal: Implementation of per project IP allowlist

11/4/2020

• Harbor container webhook demo - by Cameron McAvoy
  • slides
  • repo: https://github.com/indeedeng-alpha/harbor-container-webhook
• Prometheus Integration update by Harbor Maintainer Deng Qian
• TGIK Episode 138 focused on Harbor - https://www.youtube.com/watch?v=gNMZOlEKJnI&list=PL7bmigfV0EqQzxcNpmcdTJ9eFRPBe-iZa&index=1&t=86s&ab_channel=VMwareCloudNativeApps
• Harbor in Kubecon North America
  • Lightning talk : Harbor at the Edge
  • Harbor - Enterprise Cloud Native Artifact Registry
  • Managing Cloud Native Artifacts for Large Scale Kubernetes Cluster

8/26/2020

• Harbor cluster operator preview demo - by Steven Zou
  • Presentation slides recording : https://zoom.us/rec/share/_P1fAY3Z0H1LZLP_uQbuQJBxT7zXeaa81CMdrvYPz0hl3dQmMe_iteluPG_ioOLL?startTime=1598446889000 pw= mKE*0ebf

8/12/2020

• Replication adapter verification testing framework demo - by Ziming Zhang
• State of docker-registry (Boris Bobrov)
• v2.1 release
  • 8/17 - RC1
  • 8/27 - RC2
  • 9/3 - GA
• Harbor for machine learning artifacts proposal - https://github.com/goharbor/community/pull/143

7/15/2020

• Harbor Roadmap is documented at https://github.com/goharbor/harbor/blob/master/ROADMAP.md
• releases update
  • v2.0.1 out
  • v1.10.4 out
  • v2.2 feature planning underway
• Proxy Cache Demo

7/1/2020

• Harbor graduation from CNCF - https://www.cncf.io/announcement/2020/06/23/cloud-native-computing-foundation-announces-harbor-graduation/
• Sysdig Image Scanner for Harbor - https://docs.google.com/presentation/d/1qeb8TU4RMJ_IejT3GvrpIBz3oiqiU42Cjrfibt57Hiw/edit?usp=sharing
• non-blocking GC demo
• Alvaro showed a demo of OIDC automatic onboarding of Harbor users using email for example. Adidas needed this work

6/17/2020

Agenda

• releases update
  • v2.0.1 RC out including fixes for trivy scanner, replication, tag retention, UI
  • helm 1.4.1 will be out next week
  • good progress on v2.1 (proxy cache, non-blocking gc, p2p integration (Dragonfly, Kraken)
  • please upgrade to v1.10.3 (https://github.com/goharbor/harbor/releases/tag/v1.10.3) if you are on v1.10.1 or v1.10.2
• community updates
  • Harbor graduated from CNCF!! Woohoooo!!
• proxy cache spec
  • https://github.com/goharbor/community/pull/144

6/3/2020

Agenda

• A registry for Machine Learning workloads on Kubernetes
  • Caicloud (https://intl.caicloud.io/) present proposal for OCI-distributed artifacts
  • proxy cache spec
    • https://github.com/stonezdj/community/blob/pull_through_proxy/proposals/new/pull_through_proxy_cache.md
  • Harbor Helm 2.0 is out!!

5/20/2020

Agenda

Harbor 2.0 is released!
Harbor CNCF Webinar on May 28th, register here

5/5/2020

Agenda

• Go over proxy cache design at https://github.com/goharbor/harbor/issues/11658

4/29/2020

Agenda

• A meeting focused on feature planning for v2.1 with Harbor maintainers
  • online non-blocking GC
    • https://github.com/goharbor/harbor/issues/10167
  • proxy cache
    • https://github.com/goharbor/harbor/issues/8082
  • external scanner pull permissions required
    • https://github.com/goharbor/harbor/issues/11574

4/22/2020

Agenda

• Harbor 2.0 status update
  • RC released! https://github.com/goharbor/harbor/releases/tag/v2.0.0-rc1
• Harbor 2.1 plan introduction
  • 2.1 feature suggestions - https://github.com/orgs/goharbor/projects/1
    • non-blocking GC's proposal https://github.com/goharbor/community/pull/133
    • Proxy cache proposal https://github.com/goharbor/harbor/issues/8082
    • Support for p2p https://github.com/goharbor/harbor/issues/6890
• Harbor (core) Operator
  • V0.5.0 is available now
    • Deploy harbor stack (required + optional (Clair, ChartMuseum and Notary)
    • Delete stack
    • Update(Provision optional components)
  • Follow the installation guide to have a try
    • Feedback is welcomed
  • Great thanks to OVH team(Pierre, Jérémie and Maxime) and ZiMing from VMware Harbor team
  • Next:
    • CR per component (separate reconcile process)
    • Provide chart for deploying operator
• Harbor Cluster Operator
  • V0.5 is planned. You can check the plan items here.
  • Coding has been started
    • PRs are opened to the whole community
      • Welcome reviews!
  • You can find the related design documents in the docs folder
    • Feedback is welcomed
  • We have weekly DEV status sync meeting, you can find the minutes here.
• Replication adapter compatibility verification testing framework - Replication WG

  • Harbor has many replication adapters to adapt kinds of container registries

    • harbor(base)/docker registry: Wenkai Yin
    • Docker Hub: De Chen
    • Ali-ACR: Frank Kong
    • AWS-ECR/GCR: Ziming Zhang
    • helm hub: Mingming Pei
    • hua wei SWR: QINGDOU
    • Jfrog/quay.(io): Chengyu Zhang
    • gitlab: @lxShaDoWxl

  • Other adapters are on the way (pending)

    • TCR (Tencent container registry)
    • DTR

  • We need a way to make sure the adapters can work/still do work well with the given supporting Harbor versions

    • Harbor is upgrading
    • External registries (services) are upgrading

  • Draft ideas

    • A separate repository under goharbor
    • Setup periodical(24h) running the pipeline on top of GitHub Actions to run verification testing cases
    • Testing cases will reuse the current cases running in the nightly pipeline against GCR, Dockerhub and ECR
    • Publish daily verification testing report

    Harbor	GCR	ECR	Dockhub	...
    1.10	N	Push:Y Pull:N	Y	...
    2.0	Y	Y	Y	...

  • Discussion details

4/8/2020

Agenda

• Harbor 2.0 status update
  • bug status till RC milestone
    • 69 opened (https://github.com/goharbor/harbor/issues?q=is%3Aissue+is%3Aopen+label%3Atarget%2F2.0.0)
    • FC build for early access and testing: https://storage.googleapis.com/harbor-builds/harbor-offline-installer-v2.0.0-build.3252.tgz
• Harbor 2.1 plan introduction
  • 2.1 feature suggestions - https://github.com/orgs/goharbor/projects/1
  • non-blocking GC's proposal needs reviewing:
    • https://github.com/goharbor/community/pull/133
• CNCF SIG-Security - Harbor Project self assessment
• P2P Working Group - Integrations Between Harbor and P2P Providers

Demos

• Deploy harbor to local cluster (Kind) with operator - ZiMing Zhang
  • step by step guide: https://github.com/goharbor/harbor-operator/pull/32
    • please have a try, feedbacks are welcome!
• p2p demo - Steven Zou
  • Overall introduction

Discussion Topics: