Technology RadarTechnology Radar

Harbor

devops
This item was not updated in last three versions of the Radar. Should it have appeared in one of the more recent editions, there is a good chance it remains pertinent. However, if the item dates back further, its relevance may have diminished and our current evaluation could vary. Regrettably, our capacity to consistently revisit items from past Radar editions is limited.
Trial

We continue to utilize Harbor in our projects. Since the last iteration of the Technology Radar, we have discovered both existing and new features that we find useful:

  • An official Terraform provider for provisioning Harbor resources through Infrastructure as Code (IaC).
  • The introduction of Proxy Cache projects, which serve as pull-through caches for public container registries. These can, among other benefits, help reduce external network traffic.
Trial

Harbor is a CNCF-graduated open-source container registry. We use it to host custom-built container images from our projects. Key benefits for us are:

  • Harbor automatically scans all container images with Trivy
  • fine-grained access control allows Harbor to be used in a multi-team environment
  • its extensive API allows easy adaption to custom needs, like retention policies
  • support for image signing with Cosign