Kubernetes + Harbor

Harbor is an open source cloud native registry that stores, signs, and scans container images for vulnerabilities.

Harbor solves common challenges by delivering trust, compliance, performance, and interoperability. It fills a gap for organizations and applications that cannot use a public or cloud-based registry, or want a consistent experience across clouds.

• Demo GitHub repository: https://github.com/ruzickap/k8s-harbor
• Demo Web Pages: https://ruzickap.github.io/k8s-harbor
• Presentation git repository: https://github.com/ruzickap/k8s-harbor-presentation
• YouTube: Harbor presentation in Czech language
• Asciinema screencast: https://asciinema.org/a/253519
• Asciinema screencast (45 minutes): https://asciinema.org/a/278803

Requirements

• ansible
• awscli
• AWS IAM Authenticator for Kubernetes
• AWS account
• kubectl
• eksctl
• Kubernetes, Docker, Linux, AWS knowledge required

Objectives

• Download and install Harbor to your Kubernetes cluster

Lab Architecture

Content

• Part 01 - Create EKS cluster
• Part 02 - Install Helm
• Part 03 - ingress-nginx + cert-manager installation
• Part 04 - Harbor installation
• Part 05 - Initial Harbor tasks
• Part 06 - Harbor and Helm charts
• Part 07 - Harbor and container images
• Part 08 - Project settings
• Part 09 - Clean-up

Links

• Video:

  • Intro to Harbor
  • Intro: Harbor - James Zabala & Henry Zhang, VMware
  • Deep Dive: Harbor - Tan Jiang & Jia Zou, VMware

• Pages:

  • Deploying Harbor Container Registry in Production
  • Use the Notary client for advanced users
  • Handy API Harbor calls (in Chinese)
  • Swagger Editor + Import Harbor's swagger.yaml