<h2><img loading="lazy" decoding="async" class="alignnone size-medium wp-image-10184" src="https://apiblog.cloudastra.co/wp-content/uploads/2025/01/Overview-of-Harbor-architecture-and-components-300x300.png" alt="cloud infrastructure" width="300" height="300" srcset="https://apiblog.cloudastra.co/wp-content/uploads/2025/01/Overview-of-Harbor-architecture-and-components-300x300.png 300w, https://apiblog.cloudastra.co/wp-content/uploads/2025/01/Overview-of-Harbor-architecture-and-components-1024x1024.png 1024w, https://apiblog.cloudastra.co/wp-content/uploads/2025/01/Overview-of-Harbor-architecture-and-components-150x150.png 150w, https://apiblog.cloudastra.co/wp-content/uploads/2025/01/Overview-of-Harbor-architecture-and-components-768x768.png 768w, https://apiblog.cloudastra.co/wp-content/uploads/2025/01/Overview-of-Harbor-architecture-and-components-96x96.png 96w, https://apiblog.cloudastra.co/wp-content/uploads/2025/01/Overview-of-Harbor-architecture-and-components.png 1080w" sizes="auto, (max-width: 300px) 100vw, 300px" /></h2>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&amp;]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="a2c135ed-b00e-4652-a1c2-e3862d266b96" data-message-model-slug="gpt-4o-mini">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p>Harbor is an open-source container registry that provides a robust solution for managing container images securely and efficiently within cloud infrastructure. Designed for the cloud-native community, Harbor is a project under the Cloud Native Computing Foundation (CNCF). It enhances overall container security through features like image scanning, replication, and signing. This blog post delves into the architecture and components of Harbor, providing a comprehensive overview of how these elements work together to create a powerful container registry within cloud infrastructure.</p>
</div>
</div>
</div>
</div>
<h3>Architectural Overview of Cloud Infrastructure</h3>
<p>We can categorize the architecture of Harbor into several components that interact seamlessly to provide a comprehensive container registry solution. These components fall into the following categories:</p>
<ul>
<li><strong>Consumers</strong>: This category includes all clients and client interfaces that interact with Harbor.</li>
<li><strong>Fundamental Services</strong>: These are the core functionalities that are part of the Harbor project, along with key third-party projects that are essential to the overall package.</li>
<li><strong>Data Access Layer</strong>: This layer consists of various data stores that Harbor utilizes.</li>
<li><strong>Identity Providers</strong>: These are external authentication provider extensions that integrate with Harbor.</li>
<li><strong>Scan Providers</strong>: This includes external image CVE scanner extensions that Harbor can utilize.</li>
<li><strong>Replicated Registry Providers</strong>: These are external image replication extensions that Harbor can leverage for image management.</li>
</ul>
<p>The following sections will explore these components in detail, providing insights into their roles and functionalities within the Harbor architecture.</p>
<h3>Key Components of Harbor in Cloud Infrastructure</h3>
<h4>Harbor Core</h4>
<p>The Harbor Core is the heart of the Harbor architecture. It comprises several modules that provide key capabilities. These capabilities include API management, authentication, and authorization. The core also supports multitenancy, configuration management, and artifact management.</p>
<p>In a Kubernetes deployment, the core modules are deployed as a Kubernetes deployment resource named <code>my-harbor-core</code>, which is exposed as a Kubernetes service resource with the same name.</p>
<h4>Harbor Job Service</h4>
<p>The Job Service is an asynchronous task execution engine. It exposes REST APIs for other components to submit job requests. For example, it manages jobs related to image scanning. This microservice is deployed as a Kubernetes deployment resource named <code>my-harbor-jobservice</code>.</p>
<h4>Harbor Portal</h4>
<p>The Harbor Portal is the graphical user interface (GUI) for users to interact with the Harbor registry. It provides sophisticated screens for managing images and performing administrative tasks. Harbor supports all operations via a REST API interface for automation purposes. The portal is deployed as a Kubernetes deployment resource named <code>my-harbor-portal</code>.</p>
<h4>Harbor Registry in Cloud Infrastructure</h4>
<p>The Harbor Registry is based on the open-source project Distribution. It implements the standards defined by the OCI Distribution Specification. The registry is responsible for packing, shipping, storing, and delivering container images. It is deployed as a Kubernetes deployment resource named <code>my-harbor-registry</code>.</p>
<h4>PostgreSQL Database</h4>
<p>Harbor uses PostgreSQL as its main database to store configurations and metadata. This includes data related to projects, users, policies, scanners, charts, and images. It is deployed as a stateful set on Kubernetes called <code>my-harbor-postgresql</code>.</p>
<h4>Redis Cache</h4>
<p>Redis is utilized as a key-value store to cache metadata required by the job service. It is also deployed as a stateful set on Kubernetes, named <code>my-harbor-redis-master</code>.</p>
<h4>Trivy Scanner</h4>
<p>Trivy is the default image CVE scanner integrated with Harbor. It scans images for known vulnerabilities and produces detailed reports. Trivy is deployed as a Kubernetes deployment resource named <code>my-harbor-trivy</code>.</p>
<h4>Notary</h4>
<p>Notary provides content trust capabilities through image signing. It consists of two main components: the Notary server and the Notary signer. The server stores content metadata and ensures its validity. The signer manages private signing keys and performs signing operations. These components are deployed as <code>my-harbor-notary-server</code> and <code>my-harbor-notary-signer</code>.</p>
<h4>Chart Museum</h4>
<p>Harbor supports storing Helm charts through Chart Museum, an open-source project for Helm chart repositories. It is deployed as a Kubernetes deployment resource named <code>my-harbor-chartmuseum</code>.</p>
<h3>Data Access Layer in Cloud Infrastructure</h3>
<p>The Data Access Layer in Harbor consists of various data stores that manage the storage and retrieval of container images and associated metadata. This layer is crucial for ensuring that data is efficiently accessed and managed. It provides a seamless experience for users interacting with the Harbor registry.</p>
<h3>Identity Providers</h3>
<p>Harbor supports integration with external identity providers for authentication. This includes LDAP/Active Directory services and OpenID Connect (OIDC) providers. By integrating with these identity providers, Harbor can manage user accounts and authentication requests, enhancing security and usability.</p>
<h3>Scan Providers</h3>
<p>Harbor allows for the integration of external image scanning tools. While Trivy is the default scanner, Harbor supports other scanners such as Clair, Anchore, Aqua, DoSec, Sysdig Secure, and Tensor Security. This extensibility allows organizations to choose their preferred scanning solution based on specific needs.</p>
<h3>Replicated Registry Providers in Cloud Infrastructure</h3>
<p>Harbor supports image replication across different registries. This feature is useful for organizations that require controlled access to images from multiple sources. By configuring replication rules, Harbor can pull images from external repositories like Docker Hub and push them to internal registries. This ensures that users have access to authorized images without directly accessing external sources.</p>
<h3>Security Features</h3>
<p>Harbor is designed with security in mind. It provides several features to enhance the security posture of container images, including:</p>
<ul>
<li><strong>Image Scanning</strong>: Harbor scans images for vulnerabilities. It provides detailed reports, allowing users to identify and remediate security issues before deployment.</li>
<li><strong>Role-Based Access Control (RBAC)</strong>: Harbor implements RBAC to manage user permissions at both the project and system levels.</li>
<li><strong>Image Signing</strong>: By integrating with Notary, Harbor allows users to sign images, ensuring that only verified images are deployed in production environments.</li>
<li><strong>Policy Enforcement</strong>: Harbor enables administrators to create policies that restrict the use of images based on their vulnerability status.</li>
</ul>
<h3>Operational Control in Cloud Infrastructure with Harbor</h3>
<p>Harbor provides operational control features for effective registry management. These features include:</p>
<ul>
<li><strong>Multi-Tenancy</strong>: Harbor supports multi-tenancy, allowing different teams to manage their own projects and resources while sharing the same Harbor instance.</li>
<li><strong>Storage Quotas</strong>: Administrators can configure storage quotas for different teams to monitor and control resource usage.</li>
<li><strong>Webhook Configurations</strong>: Harbor allows for webhook configurations to trigger CI/CD pipelines based on specific events.</li>
<li><strong>Garbage Collection</strong>: Harbor includes a garbage collection routine to clean up untagged artifacts.</li>
</ul>
<h3>Getting Started with Harbor in Cloud Infrastructure</h3>
<p>Users can deploy Harbor on a Kubernetes cluster using Helm charts to get started. The installation process involves adding the Bitnami Helm repository, creating a namespace for Harbor, and deploying the Helm chart. Once deployed, users can access the Harbor portal and begin managing their container images.</p>
<ol>
<li><strong>Add Bitnami Helm Repository</strong>:
<pre><code>helm repo add bitnami https://charts.bitnami.com/bitnami</code></pre>
</li>
<li><strong>Create a Namespace</strong>:
<pre><code>kubectl create namespace harbor</code></pre>
</li>
<li><strong>Install Harbor</strong>:
<pre><code>helm install my-harbor bitnami/harbor -n harbor</code></pre>
</li>
<li><strong>Access Harbor</strong>: After installation, users can access the Harbor portal and log in with the provided credentials.</li>
</ol>
<h3>Conclusion</h3>
<p>Harbor is a powerful and flexible container registry that provides a comprehensive solution for managing container images within cloud infrastructure. Its architecture comprises various components and services, enabling organizations to enhance their security posture. By leveraging Harbor&#8217;s capabilities, teams can ensure that their container images are secure, compliant, and readily accessible for deployment in cloud-native environments. Additionally, Harbor supports <a href="https://cloudastra.co/blogs/docker-registry-cache">Docker Registry Caching</a>, optimizing image retrieval and reducing network latency for more efficient container management.</p>
<p>In summary, Harbor stands out as a mature, community-driven project that meets the needs of modern container management. It also provides the extensibility and security features necessary for today&#8217;s enterprise environments. As organizations continue to adopt cloud-native technologies, Harbor will play a critical role in managing and securing their containerized applications within cloud infrastructure.</p>
<div class="max-w-[100%] md:max-w-[65%] flex flex-col justify-center rounded-md shadow-[2px_2px_10px_2px_#00000024,-2px_-2px_10px_1px_#00000024] px-4 py-2 ">
<div class=" flex flex-col justify-center gap-4">
<div id="postBody" class="jsx-53bba7bd2df205e7 mt-5 flex flex-col justify-center gap-5">
<p>Do you like to read more educational content? Read our blogs at<a href="https://www.cloudastra.co/blogs"> Cloudastra Technologies</a> or contact us for business enquiry at <a href="https://www.cloudastra.co/contact">Cloudastra Contact Us</a>.</p>
</div>
</div>
</div>


Overview of Harbor architecture and components

Cloud-native Security

Blog Details

Overview of Harbor architecture and components

Overview of Harbor architecture and components

Share This Article

Follow Us