harborAn open source trusted cloud native registry project that stores, signs, and scans content.

harbor

Harbor is an open source trusted cloud native registry that stores, signs, and scans container images and Helm charts. It extends Docker Distribution with enterprise-grade features including security, identity management, vulnerability scanning, and policy-based replication across multiple registries.

Key Features

• Cloud Native Registry: Supports both container images and Helm charts with full OCI Distribution compliance for modern cloud environments.
• Role Based Access Control: Manages user permissions through projects with fine-grained controls for images and charts.
• Vulnerability Scanning: Automatically scans images for vulnerabilities with policy enforcement to prevent insecure deployments.
• Policy Based Replication: Synchronizes images and charts across multiple registry instances with automatic retry and filtering capabilities.
• Image Signing and Trust: Supports Docker Content Trust using Notary to guarantee image authenticity and provenance.
• Enterprise Authentication: Integrates with LDAP/AD and OpenID Connect for seamless identity management and single sign-on.
• Auditing and Logging: Tracks all repository operations for compliance and security monitoring.

Use Cases

• Multi-Datacenter Deployments: Replicate container images across geographic regions for high availability and improved transfer efficiency.
• Enterprise Security Compliance: Implement vulnerability scanning and access controls to meet organizational security policies.
• Hybrid Cloud Scenarios: Manage container registries across multiple cloud providers with consistent policies and controls.
• DevOps Automation: Integrate with CI/CD pipelines using RESTful APIs for automated image management and deployment.

Who Is It For

Harbor is designed for enterprises and organizations deploying containerized applications at scale who need a secure, feature-rich registry solution with advanced management, scanning, and replication capabilities. It serves DevOps teams, cloud architects, and security professionals managing Kubernetes and container infrastructure.