Harbor

We continue to utilize Harbor in our projects. Since the last iteration of the AOE Technology Radar, we have discovered both existing and new features that we find useful:

• An official Terraform provider for provisioning Harbor resources through Infrastructure as Code (IaC).
• The introduction of Proxy Cache projects, which serve as pull-through caches for public container registries. These can, among other benefits, help reduce external network traffic.

Harbor is a CNCF-graduated open-source container registry. We use it to host custom-built container images from our projects. Key benefits for us are:

• Harbor automatically scans all container images with Trivy
• fine-grained access control allows Harbor to be used in a multi-team environment
• its extensive API allows easy adaption to custom needs, like retention policies
• support for image signing with Cosign