Project Lightning Talk: Harbor Update - Prasanth Baskar, Maintainer

This talk covers recent updates and future plans for Project Harbor, a tool designed for cloud-native registry management. The speaker, a core contributor, discusses the newly released version 2.15, which includes features such as disabling tags for storage performance improvement and support for Aqua Security signatures. Upcoming enhancements include replacing Redis with Val Key for better performance and integrating comprehensive Trivy scan results. Additionally, the speaker introduces two subprojects: Harbor Satellite, a zero-trust, stateless registry for edge devices, and Harbor CLI, which has surpassed 100,000 downloads and aims to streamline Harbor management through automation. The speaker encourages audience engagement through community channels and invites attendees to visit their booth for more information.

Hello everyone. Um, I'm Prashant, and I'm here to uh deliver updates on project Harbor. So, let's get this started. Who am I? Um I said I'm a core contributor to Harbor, and uh I also contribute to various uh registry-based uh CNCF projects. You can see all of them here. And then, uh let's quickly jump over to updates. Um, so uh we recently released version 2.15. It's the

latest release of Harbor, and this version includes a few features requested by the community people, uh which are uh new option for disabling uh tags that is landing onto the S3 and different storages to improve the performance of the garbage collection that is in Harbor. And the other one is upstream proxy connect uh cache registry connection limits, which is basically uh if you're using Harbor as a

proxy cache, then you don't want to waste your uh rate limits in Docker Harbor or any other upstream registry. So, we added that feature. And then, we also have support for Aqua Security signatures. Uh so, yeah. And what is it planned for the next release cycle is replacing the Redis, which is a component in Harbor for um improving the performance. We are going to replace it with

Val Key. And then, uh we're going to support uh Trivy results like including the config uh secrets and all the things you get from a Trivy scan, not just vulnerabilities. So, these are the updates. Let's quickly jump over to the subprojects of Harbor. Um, so Harbor has two subprojects. One is uh Harbor Satellite, and the other one is Harbor CLI. So, let's quickly uh see what are

the updates in them. Uh the first one is Harbor Satellite. So, Harbor Satellite is basically a stateless, secretless, zero-trust registry, which has a very minimal footprint, uh designed to be running on the edge and edge-based devices, air-gap devices, and everything. And we I also have a talk uh coming on uh Kubernetes on H Day, which will be like 12:25 p.m. today. So, I'm going to run over

to that. And so, yeah. To know more about that, come to the talk. And Harbor CLI, we are celebrating like 100k plus downloads. And if you haven't tried Harbor CLI yet, please check it out. There's a QR code which you can try it out. Basically, it's a Harbor has a UI and it's for automating the management of Harbor and to do a lot more config in a

way that is like automatable. So, it's much more easy and integratable in your workflows. So, yeah. And thanks to the people who built Harbor CLI. So, these are the people I'm thanking them. And so, also thanks to these two guys which are Lakshya and Patrick. They helped really a lot given that we had a like a lot of AS log spam PRs coming in and these guys

helped them to triage them, fix them. And yeah, these guys were started as a mentee from LFX mentorship. And then, they slowly climbed up the contributor ladder and become the maintainers of CLI project. And yeah, I'm one of those guys too who started as a mentee now maintainer and here. So, happy to be. the workflows I mentioned with the Harbor CLI. We also have a zero CV

kind of workflow with integrating with Harbor and then extending it. So, you can basically have a single command to get patch up your images to have zero CV vulnerabilities things. I will give you the command and everything. Reach out to us booth. So, where? We have a booth at project pavilion uh 20B. We will be from Tuesday to Thursday afternoons usually. So, you can see the timings.

Check them out. Come say hi. Please talk to us. We are more than happy to talk to you. And these are the community contacts we have. We are in Slack #harbor, Harbor Dev. We are on Twitter, mailing list. Also, we recently opened a LinkedIn page to put updates about Harbor. And we also have meetings a bi-weekly community meetings on Wednesdays. Please make sure to join them. Also,

try to communicate with Talk to us how you are We are more than happy to hear your use cases and your stories. Also, reach us to the booth. You can see me around. Um Okay, then. Yep. Thank you. Thank you, everyone, for your time. Bye-bye. Wow.