harbor/docs/1.10/administration/configuring_replication/create_replication_endpoints.md

56 lines
2.3 KiB
Markdown
Raw Normal View History

2020-01-13 14:25:02 +01:00
[Back to table of contents](../../index.md)
----------
2019-12-13 16:57:46 +01:00
# Creating Replication Endpoints
2019-10-17 17:40:06 +02:00
To replicate image repositories from one instance of Harbor to another Harbor or non-Harbor registry, you first create replication endpoints.
1. Go to **Registries** and click the **+ New Endpoint** button.
2019-10-18 15:30:53 +02:00
![New replication endpoint](../../img/replication-endpoint1.png)
2019-10-17 17:40:06 +02:00
1. For **Provider**, use the drop-down menu to select the type of registry to set up as a replication endpoint.
The endpoint can be another Harbor instance, or a non-Harbor registry. Currently, the following non-Harbor registries are supported:
- Docker Hub
- Docker registry
- AWS Elastic Container Registry
- Azure Container Registry
- Ali Cloud Container Registry
- Google Container Registry
- Huawei SWR
- Helm Hub
2019-12-13 16:57:46 +01:00
- Gitlab
- Quay.io
- Jfrog Artifactory
2019-10-17 17:40:06 +02:00
2019-10-18 15:30:53 +02:00
![Replication providers](../../img/replication-endpoint2.png)
2019-10-17 17:40:06 +02:00
1. Enter a suitable name and description for the new replication endpoint.
1. Enter the full URL of the registry to set up as a replication endpoint.
For example, to replicate to another Harbor instance, enter https://harbor_instance_address:443. The registry must exist and be running before you create the endpoint.
1. Enter the Access ID and Access Secret for the endpoint registry instance.
Use an account that has the appropriate privileges on that registry, or an account that has write permission on the corresponding project in a Harbor registry.
**NOTES**:
- AWS ECR adapters should use access keys, not a username and password. The access key should have sufficient permissions, such as storage permission.
- Google GCR adapters should use the entire JSON key generated in the service account. The namespace should start with the project ID.
1. Optionally, select the **Verify Remote Cert** check box.
Deselect the check box if the remote registry uses a self-signed or untrusted certificate.
1. Click **Test Connection**.
2019-10-17 19:00:00 +02:00
1. When you have successfully tested the connection, click **OK**.
2019-12-13 16:57:46 +01:00
2019-10-17 19:00:00 +02:00
## Managing Registries
You can list, add, edit and delete registries under `Administration->Registries`. Only registries which are not referenced by any rules can be deleted.
2020-01-13 14:25:02 +01:00
![browse project](../../img/manage_registry.png)
----------
[Back to table of contents](../../index.md)