Shulou(Shulou.com)06/03 Report--

This article to share with you the installation and use of Kubernetes Harbor, I believe that most people have not learned this skill, in order to let you learn, to give you a summary of the following, do not say much, let's read on.

A brief introduction to Harbor

1.Harbor introduction

Harbor is an enterprise-class Registry server for storing and distributing Docker images, extending open source Docker Distribution by adding some essential features of the enterprise, such as security, identity, and management. As an enterprise-class private Registry server, Harbor provides better performance and security. Improve the efficiency of users using Registry to build and run the environment to transfer images. Harbor supports replication of image resources installed on multiple Registry nodes, and all images are stored in private Registry to ensure that data and intellectual property rights are controlled in the company's internal network. In addition, Harbor also provides advanced security features, such as user management, access control and activity auditing.

2.Harbor characteristics

Role-based access control: users and Docker image repositories are organized and managed through a "project". A user can have different permissions for multiple image repositories in the same namespace (project). Mirror replication: mirrors can be replicated (synchronized) in multiple Registry instances. It is especially suitable for load balancing, high availability, hybrid cloud and cloudy scenarios. Graphical user interface: users can browse through the browser, retrieve the current Docker image repository, and manage projects and namespaces. AD/LDAP support: Harbor can integrate the existing AD/LDAP within the enterprise for authentication and authentication management. Audit management: all operations against the image warehouse can be recorded and traced for audit management. Internationalization: there are localized versions in English, Chinese, German, Japanese and Russian. More languages will be added. RESTful API: RESTful API provides administrators with more control over Harbor, making it easier to integrate with other management software. Easy to deploy: provide both online and offline installation tools, or install to virtual devices on the vSphere platform (OVA mode).

3.Harbor component

Harbor is architecturally composed of six components:

Proxy:Harbor 's registry, UI, token and other services receive requests from browsers and Docker clients through a front-end reverse proxy, and forward the requests to different back-end services.

Registry: responsible for storing Docker images and processing docker push/pull commands. Since we need to control the access of users, that is, different users have different read and write permissions to Docker image, Registry will point to a token service, forcing users to carry a valid token for each docker pull/push request, and Registry will decrypt and verify the token through the public key.

Core services: this is the core function of Harbor and mainly provides the following services:

UI: provides a graphical interface to help users manage image on registry and authorize users.

Webhook: in order to get the image state changes on registry in time, configure webhook on Registry and pass the state changes to the UI module.

Token service: responsible for issuing token. Token to each docker push/pull command according to the user's rights. Requests made by Docker clients to the Regi ø stry service, if they do not include token, will be redirected here and redirected to Registry after obtaining the token.

Database: provides database services for core services, which is responsible for storing data such as user permissions, audit logs, Docker image grouping information, etc.

Job Services: remote replication of images is provided to synchronize local mirrors to other Harbor instances.

Log collector: to help monitor the operation of Harbor, collect the log of other components for later analysis. II. Install and configure Harbor

1. Environmental preparation

CentOS Linux release 7.3.1611 (Core) docker-ce-18.06.1docker-compose version 1.21.2, build a133471harbor-v1.8.0

2. Install docker

# install dockeryum install-y docker-ce-18.06.1.ce-3 # using Ali Cloud Image Warehouse wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo-O / etc/yum.repos.d/docker-ce.repo# # the installation package yum-y install https://mirrors.aliyun.com/docker-ce/linux/centos/7/x86_64/stable/Packages/docker-ce-18. may not be found 06.3.ce-3.el7.x86_64.rpm# set docker startup parameters (optional) # graph: set docker data directory: select a larger partition (I am the root directory here, so I don't need to configure it Default is / var/lib/docker) # exec-opts: set cgroup driver (default is cgroupfs, systemd is not recommended) # insecure-registries: set private warehouse cat > / etc/docker/daemon.json

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.