• Repository for storing images • Intermediary for shipping and distributing images and applying RBAC Lifecycle of Containers and Images Agenda 1 Containers 101 2 Introduction to Harbor 3 Image Consistency integrated with internal user management system ■ LDAP/Active Directory 21 Role-Based Access Control (RBAC) 22 Members Images Guest: Developer: Admin: docker pull ... docker pull/push Project Image scanning improvements • Clustering – local and remote • Increase scalability • Improved RBAC • Improved multi-tenancy • harborctl CLI client • Tag lifecycle management 36 Contributing to Future

trigger Access Control • RBAC • AD/LDAP integration Audit Log • Operations recorded for audit Distribution Policy • Based on content trust • Based on vulnerability • Based on RBAC Main Features （ Cont

���� ������� ��,������� ���� ��������� AD/LDAP ���� ���� ��������� ���� ������ ������ ��RBAC ���� ��� 10 ���� �������� ��������� ���� ������ HA��� ������ Helm Chart�� Helm Chart��

���� ������� ��,������� ���� ��������� AD/LDAP ���� ���� ��������� ���� ������ ������ ��RBAC ���� ��� 10 ���� �������� ��������� ���� ������ HA��� ������ Helm Chart�� Helm Chart��

organization • Access Control 13 Enterprise Oriented Features • User management & access control • RBAC: admin, developer, guest • AD/LDAP integration • Policy based image replication • Web UI ( 中文 and

数据传输性能更好； • 出于安全考虑。 vs. Features of • VMware中国团队开源的企业级镜像仓库项目，聚焦镜 像仓库的企业级需求： – 支持基于角色的访问控制RBAC； – 支持镜像复制策略（PUSH）； – 支持无用镜像数据的自动回收和删除； – 支持LDAP/AD认证； – Web UI； – 提供审计日志功能； – 提供RESTful API，便于扩展；

license. • https://github.com/vmware/harbor/ 8 Key Features • User management & access control – RBAC: admin, developer, guest – AD/LDAP integration • Policy based image replication • Vulnerability

贡献者 1100+ 分支 6 合作者 20K+ 下载 1000+ 用户 Harbor部分用户 14 主要特性 访问控制 基于角色的访问控制 （RBAC） AD/LDAP 用户身份集成 直接添加LDAP用户为成员 远程复制 支持过滤器 支持定时,即时和手动策略 漏洞扫描 多种漏洞扫描策略 配置策略阻止漏洞 镜像分发