118 questions
0
votes
1
answer
454
views
Use custom authentication server for harbor registry
I am new to kubernetes and trying to deploy harbor on minikube using their official helm chart. I would like to use my custom docker authentication server when the docker client tries to authenticate ...
1
vote
1
answer
217
views
Images Sent to Harbor locally with Size X and via CI/CD Pipeline with Size Y
After setting up a CI/CD pipeline using GitLab, Harbor, and Rancher, I identified an issue with the deployment of my application where it didn't function properly.
However, when deploying manually (...
1
vote
0
answers
290
views
What is the meaning of the namespace in Harbor replication rule
What is the meaning of the namespace during the creation of Harbor replication rule.
I have seen this: (https://goharbor.io/docs/2.0.0/administration/configuring-replication/create-replication-rules/),...
0
votes
1
answer
266
views
Ubuntu Docker image that equivalent to vmImage: ubuntu [closed]
I'm trying to build a Debian package on a ubuntu container job on azure pipeline.
Here is my setup:
pool: 'AWSLinux'
container:
image: ubuntu:20.04
But it looks ubuntu:20.04 docker image does not ...
0
votes
1
answer
730
views
Helm push with user credentials
have a pipeline for installation/deploying db cluster Patroni(Postgress). Cheerfully had been designing my pipeline and stack with kinda type of error below.
Most obvious remarks:
And Yes, i had ...
0
votes
1
answer
622
views
Harbor docker push first path segment in URL cannot contain colon
I have set up harbor behind an nginx reverse-proxy, and when I push docker images to it, I get this error
5bfe9e7b484e: Retrying in 1 second
b59ac5e5fd8f: Retrying in 1 second
3a69b46a1ce6: Retrying ...
0
votes
1
answer
2k
views
Issue with pushing big image to harbor repository
I'm encountering an issue while attempting to push a large image (~1 GB) to an internally hosted Harbor repository. Upon completion of pushing the largest layer, I receive the following error:
...
0
votes
1
answer
240
views
Can images be blocked from being pushed to Harbor based on the number of artifacts for that image?
I see some teams push an unnecessary number of image artifacts (revisions/tags) to a harbor repository. I understand that there may be some rules that can be applied that prune artifacts but I do not ...
0
votes
1
answer
1k
views
Does Harbor registry garbage collector remove all untagged images?
I deleted some repositories from the Harbor registry UI; however, the disk space is not being freed up. I want to completely remove the repositories that I deleted from the UI, but I also want to ...
0
votes
1
answer
1k
views
How to delete repositories and artifacts from Harbor when files don't exist anymore
We have a unique setup where we use Harbor as a mirror. So we setup a registry and replication, so we could pull from another repository.
But since we are just pulling, we don't need to backup the ...
0
votes
1
answer
1k
views
Harbor Helm Chart: Issue with Disabling Redis & lightweight helm package by keep only minimal services
I've been working on deploying Harbor using the goharbor/harbor-helm Helm chart. My goal is to streamline the Harbor deployment by cutting down some of the services, specifically leaving only Core, ...
0
votes
1
answer
292
views
Can't create filtered replication rule through Harbor API
I'm using the Swagger API tool built into harbor. I've successfully created replication rules using the API, but the problem comes when I try to add a filter. From trial and error, I've managed to ...
1
vote
0
answers
1k
views
How to Configure Containerd to Use a Specific Endpoint in a Harbor Proxy Cache Registry
I'm currently setting up a Kubernetes cluster and using containerd as the container runtime. I have a Harbor registry with a proxy cache project set up to cache images from an external registry (...
1
vote
0
answers
110
views
golang docker client build failed : 401 Unauthorized
cli, err := client.NewClientWithOpts(client.WithVersion("1.40"))
if err != nil {
return "", err
}
defer cli.Close()
authConfig := types.AuthConfig{
...
0
votes
1
answer
153
views
Problems after Harbor rollback
Harbor rollback.
Updated Harbor, but after a while the work had to be rolled back. The database and settings of Harbor itself were rolled back, but the artifacts on the disk have changed in the ...
0
votes
0
answers
2k
views
Failed to push images to harbor with 500 Error
i'm trying to push images to my harbor registry. I'm sure my account can pull and push. when i use docker push command in terminal it shows received unexpected HTTP status: 500 Internal Server Error.
...
1
vote
0
answers
1k
views
action: push: unauthorized to harbor registry with OIDC
I have a new instance of Harbor with OIDC enabled. I can log into the web portal just fine. However when I am trying to do a docker login it fails as follows
Error response from daemon: Get "...
0
votes
1
answer
715
views
Pulling images from insecure local private registry (Harbor) with all k8s worker node without ssh access them
I faced such a task, there is a kubernetes cluster in a private network without Internet access, it is necessary for k8s deployments to pull an image from a private docker repository that does not ...
0
votes
1
answer
1k
views
How to Optimize Docker Image Size and Reduce Push Time to Harbor?
I am currently using Harbor as a Docker image configuration management tool in my company. Before running the Next.js Docker image on the Linux server, I push the Docker image to Harbor and then ...
0
votes
1
answer
729
views
What kind of information is stored on the PVC's for Harbor?
There is no information within Harbor's documentation about the kind of data that is stored within the persistent volume claim's for Harbor. Is anyone aware of what's being stored on there?
0
votes
1
answer
435
views
How to increase Kubeflow Jupyter notebook image name to see the complete path
I have a deployment of Kubeflow. During creation of Jupyter Notebook, we have image name tags that are longer than that can be displayed in the Docker image name list. See the image list in the ...
-1
votes
1
answer
929
views
Harbor registry proxy cache vs replication [closed]
I'm new to Harbor registry. I was asked to propose an architecture for harbor in my company. I proposed at first to use an architecture based on proxy cache. But the CISO refused to use proxy cache ...
3
votes
0
answers
3k
views
Harbor Invalid user name or password in port forward
I am unable to login to harbor portal after installing it in kubernetes and port forwarding it. Harbor-core service is not accessible and I am not sure if I should accesss harbor core or harbor portal....
1
vote
1
answer
579
views
Gitlab DOCKER_AUTH_CONFIG with multiple robot accounts from the same registry
I use Harbor as a private Registry for my Docker images, and I store my images in different projects (ex: myproject1, myproject2, etc).
Then I create one robot account in my project "myproject1&...
0
votes
1
answer
2k
views
Harbor - Configure Http using Cloudflare
I'm making some tests with harbor container registry.
In order to publish it to production I wanted to add the ssl support.
As cloudflare provides it I'm wondering if is it possible to make it work.
...
1
vote
1
answer
3k
views
failed to unpack image on snapshotter overlayfs: unexpected media type text/html
I try pull image in K8s from my private registry
But the container describe show
Events:
Type Reason Age From Message
---- ------ ---- ---- ...
1
vote
1
answer
3k
views
Change admin password in WEB UI have error
change admin password in WEB UI (harbor v2.1.0)
login in error happen, have success and unauthorized
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
WARNING! Your password ...
0
votes
1
answer
346
views
How to get a webhook from harbor using alertmanger?
Suppose I have enabled webhook on harbor
And... How to get a webhook from harbor using alertmanger?
Initially, I tried to do it through vmalert and collecting metrics from harbor. In this way I did ...
1
vote
1
answer
887
views
How to find the pulled date of an image in Harbor with skopeo inspect?
How to get the docker image when has been pulled with skopeo inspect?
When I use skopeo inspect --tls-verify=false docker://${image_path}:${tag} --config
I can only find the key value "created&...
1
vote
0
answers
103
views
Is the push replication mode in harbor synchronous or asynchronous?
Suppose I have 2 harbor repositories, 1 A and 1 B. A has set up replication rules in replication management to replicate mirrors to B via push mode.
So I want to ask when I push the mirror like A, ...
1
vote
0
answers
1k
views
Unable to pull docker images from harbor through proxy if default_backend is not mentioned
I have a private docker harbour repository which is having docker images and helm charts. I don't want to expose my harbour repository directly. I want to pull docker images and helm charts via HA ...
2
votes
0
answers
1k
views
harbor behind nginx reverse proxy some uri 404 not found
harbor version
2.6.2
description
harbor was deployed in vmware machin http://192.168.195.160:8092/,it's OK, I can get accessed with no issue. but when I deploy nginx in order to use http://192.168....
2
votes
0
answers
915
views
Is it possible to use Harbor Replication Rules to mirror Docker Images by digest?
I am looking to mirror Docker images to a Harbor instance based on tags and digests.
My standard approach thus far has involved creating Harbor Replication Rules. This works well for replicating ...
2
votes
1
answer
546
views
How to estimate compressed Docker image size before the push?
I have a private Docker registry based on Harbor. I know that Docker does its own compression just before pushing an image to the registry. However, local-to-registry compression ratio is never the ...
0
votes
1
answer
415
views
Passing Trivy results to harbor
Before pushing an image into Harbor, I'm running a Trivy scan. Instead of having Trivy scan images again within harbor, I'm looking for a way to pass the JSON results from Trivy into harbor.
trivy ...
2
votes
1
answer
1k
views
Harbor installation via Bitnami helm chart expose via host machine ingress controller (not External Load Balancers) on single node microk8s cluster
it is about to expose service via ingress rules and ingress controller , i do installation of harbor registry via helm chart https://github.com/bitnami/charts/tree/master/bitnami/harbor and default ...
0
votes
1
answer
3k
views
HARBOR Registry Return x509 error During the login session
In ethernet connected system I use harbor registry for docker images in login session it returns x509: certificate relies on legacy Common Name field, use SANs instead error.
How I resolve this ...
0
votes
1
answer
834
views
Where are the manifest files of docker images stored on private registry?
I have a Harbor registry containing docker images on AWS s3, what is the path for the manifest file for each image?
0
votes
1
answer
1k
views
Harbor - Copy registry
I have a Harbor server which has no connection to the internet what so ever. Not through a proxy, nothing and I need to get a bunch of container images from a vendor to it.
I've installed Harbor on a ...
0
votes
1
answer
218
views
Why can use “docker run imgae“ an image,but can't “docker-compose“ run the same image?
My db.docker file
FROM loongson.harbor.cn/larchloongsoncloud/loongnix-server:8.3
RUN yum install -y glibc-common
#RUN locale-gen en_US.UTF-8
ENV LANG en_US.UTF-8
ENV LANGUAGE en_US:en
ENV LC_ALL en_US....
0
votes
1
answer
2k
views
Kubernetes - how to specify image pull secrets, when creating deployment with image from remote private repo
I need to create and deploy on an existing Kubernetes cluster, an application based on a docker image which is hosted on private Harbor repo on a remote server.
I could use this if the repo was public:...
0
votes
1
answer
419
views
private network harbor access remote server using router
I have harbor git registry in private network.
This network connect internet using router.
I try docker login where remote server. This server not in private network
(Remote server - Router - Harbor(...
0
votes
1
answer
5k
views
Failed to pull image with "x509: certificate signed by unknown authority" error
I am using k3s kubernetes, and Harbor as a private container registry. I use a self-sign cert in Harbor. And I have a sample image in Harbor, which I want to create a sample pod in Kubernetes using ...
1
vote
3
answers
8k
views
Pulling image from private container registry (Harbor) in Kubernetes
I am using Harbor (https://goharbor.io/) for private container registry. I run the Harbor using docker compose, and it is working fine. I can push/ pull images to this private registry using a VM. I ...
2
votes
1
answer
2k
views
Is there a way to exclude untagged artifacts from Harbor's immutability rules?
I'm using a setting like this:
However, this also makes the untagged artifact immutable.
I want to delete untagged artifacts according to the retention policy, but I can't delete them because they ...
0
votes
1
answer
893
views
Harbor Onboard oidc user via API
We are facing the issue while doing onboarding of a oidc user via API.
We are calling the same API which called from the UI when we do the same activity from UI.
/c/oidc/onboard
Api is always throwing ...
1
vote
4
answers
8k
views
Docker image list doesn't show images on private registry
We have a private harbor registry that's insecure. We use docker client on a centos7 VM to push /pull images. We lost the docker client centos7 VM so have installed a new one. The issue I see is ...
0
votes
2
answers
651
views
Warning FailedScheduling 12s (x3 over 13s) default-scheduler 0/1 nodes are available: 1 node(s) didn't match node selector
I'm stuck deploying the microservices locally with the following stack: Skaffold, minikube, helm, and harbor.
These microservices can be deployed locally without any problem with docker and docker-...
0
votes
1
answer
858
views
Harbor 2.5.0 behind Apache reverse proxy
I installed Harbor in a server inside the company farm and I can use it without problem through https://my-internal-server.com/harbor.
I tried to add the reverse proxy rules to Apache to access it ...
3
votes
0
answers
5k
views
helm harbor is not a valid chart repository or cannot be reached: object required
I've successfully pushed some locally built helm chart to harbor private helm registry using below commands:
helm registry login private.harbor.com
helm push chart-version.tgz oci://private.harbor.com/...