diff --git a/AUTHORS b/AUTHORS index 22700ab5e..7a86407e2 100644 --- a/AUTHORS +++ b/AUTHORS @@ -5,6 +5,7 @@ Alexey Erkak Allen Heavey Amanda Zhang Andre Cruz +Aron Parsons Benniu Ji Bin Liu Bobby Zhang @@ -12,6 +13,7 @@ Brian Christner Chaofeng Wu Daniel Jiang Deshi Xiao +Feileng Cui Guangping Fu Haining Henry Zhang Hao Xia @@ -19,6 +21,7 @@ Haoyuan Jack Liu Jessy Zhang Jianye Li +Kira Kun Wang Mahesh Paolini-Subramanya Maxwell <710028463 at qq.com> @@ -29,6 +32,7 @@ Penghao Cen Phillip Gomez Robin Naundorf Shan Zhu +Steven Zou Robin Yue Tobe Chen Victoria Zheng diff --git a/CHANGELOG.md b/CHANGELOG.md index 5884b6fc9..3fb603ff3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,33 @@ # Changelog + +## v1.1.0 (2017-4-18) + +- Add in Notary support +- User can update configuration through Harbor UI +- Redesign of Harbor's UI using Clarity +- Some changes to API +- Fix some security issues in token service +- Upgrade base image of nginx for latest openssl version +- Various bug fixes. + +## v0.5.0 (2016-12-6) + +- Refactory for a new build process +- Easier configuration for HTTPS in prepare script +- Script to collect logs of a Harbor deployment +- User can view the storage usage (default location) of Harbor. +- Add an attribute to disable normal user to create project +- Various bug fixes. + +For Harbor virtual appliance: + +- Improve the bootstrap process of ova installation. +- Enable HTTPS by default for .ova deployment, users can download the default root cert from UI for docker client or VCH. +- Preload a photon:1.0 image to Harbor for users who have no internet connection. + + + ## v0.4.5 (2016-10-31) - Virtual appliance of Harbor for vSphere. diff --git a/README.md b/README.md index f70ffd44e..18d9167e7 100644 --- a/README.md +++ b/README.md @@ -12,6 +12,7 @@ Project Harbor is an enterprise-class registry server that stores and distribute * **Policy based image replication**: Images can be replicated (synchronized) between multiple registry instances. Great for load balancing, high availability, multi-datacenter, hybrid and multi-cloud scenarios. * **LDAP/AD support**: Harbor integrates with existing enterprise LDAP/AD for user authentication and management. * **Image deletion & garbage collection**: Images can be deleted and their space can be recycled. +* **Notary**: Image authenticity can be ensured. * **Graphical user portal**: User can easily browse, search repositories and manage projects. * **Auditing**: All the operations to the repositories are tracked. * **RESTful API**: RESTful APIs for most administrative operations, easy to integrate with external systems. @@ -44,6 +45,6 @@ Harbor is available under the [Apache 2 license](LICENSE). This project uses open source components which have additional licensing terms. The official docker images and licensing terms for these open source components can be found at the following locations: * Photon OS 1.0: [docker image](https://hub.docker.com/_/photon/), [license](https://github.com/vmware/photon/blob/master/COPYING) -* Docker Registry 2.5: [docker image](https://hub.docker.com/_/registry/), [license](https://github.com/docker/distribution/blob/master/LICENSE) +* Docker Registry 2.6: [docker image](https://hub.docker.com/_/registry/), [license](https://github.com/docker/distribution/blob/master/LICENSE) * MySQL 5.6: [docker image](https://hub.docker.com/_/mysql/), [license](https://github.com/docker-library/mysql/blob/master/LICENSE) * NGINX 1.11.5: [docker image](https://hub.docker.com/_/nginx/), [license](https://github.com/nginxinc/docker-nginx/blob/master/LICENSE) diff --git a/ROADMAP.md b/ROADMAP.md index 72cea6784..18738072a 100644 --- a/ROADMAP.md +++ b/ROADMAP.md @@ -20,28 +20,22 @@ The notary feature allows publishers to sign their images offline and to push th ### 2. Vulnerability Scanning The capability to scan images for vulnerability. -### 3. Image replication between Harbor instances (Completed) -Enable images to be replicated between two or more Harbor instances. This is useful to have multiple registry servers servicing a large cluster of nodes, or have distributed registry instances with identical images. +### 3. Image replication enhancement +To provide more sophisticated rule for image replication. +- Image filtering by tags +- Replication can be scheduled at a certain time using a rule like: one time only, daily, weekly, etc. +- Image deletion can have the option not to be replicated to a remote instance. +- Global replication rule: Instead of setting the rule of individual project, system admin can set a global rule for all projects. +- Project admin can set replication policy of the project. -### 4. Image deletion and garbage collection (Completed) -a) Images can be deleted from UI. The files of deleted images are not removed immediately. - -b) The files of deleted images are recycled by an administrator during system maintenance(Garbage collection). The registry service must be shut down during the process of garbage collection. - - -### 5. Authentication (OAuth2) +### 4. Authentication (OAuth2) In addition to LDAP/AD and local users, OAuth 2.0 can be used to authenticate a user. -### 6. High Availability (in progress) +### 5. High Availability Support multi-node deployment of Harbor for high availability, scalability and load-balancing purposes. -### 7. Statistics and description for repositories +### 6. Statistics and description for repositories User can add a description to a repository. The access count of a repo can be aggregated and displayed. - -### 8. Audit all operations in the system -Currently only image related operations are logged. Other operations in Harbor, such as user creation/deletion, role changes, password reset, should be tracked as well. - - -### 9. Migration tool to move from an existing registry to Harbor +### 7. Migration tool to move from an existing registry to Harbor A tool to migrate images from a vanilla registry server to Harbor, without the need to export/import a large amount of data. diff --git a/make/harbor.cfg b/make/harbor.cfg index 29202b4eb..f720ab76d 100644 --- a/make/harbor.cfg +++ b/make/harbor.cfg @@ -27,7 +27,7 @@ ssl_cert_key = /data/cert/server.key #The path of secretkey storage secretkey_path = /data -#Admiral's url, comment this attribute, or set its value to to NA when Harbor is standalone +#Admiral's url, comment this attribute, or set its value to NA when Harbor is standalone admiral_url = NA #NOTES: The properties between BEGIN INITIAL PROPERTIES and END INITIAL PROPERTIES @@ -90,7 +90,8 @@ self_registration = on token_expiration = 30 #The flag to control what users have permission to create projects -#Be default everyone can create a project, set to "adminonly" such that only admin can create project. +#The default value "everyone" allows everyone to creates a project. +#Set to "adminonly" so that only admin user can create project. project_creation_restriction = everyone #Determine whether the job service should verify the ssl cert when it connects to a remote registry.