Signed-off-by: jeffweilee <jeffweilee@gmail.com>
Update configure_https.md
Signed-off-by: jeffweilee <jeffweilee@gmail.com>
Update configure_https.md
Signed-off-by: jeffweilee <jeffweilee@gmail.com>
Update configure_https.md
1. There is no need to have Getting Client Certificate Section. All we need is CA and Server Certificate.
2. Modify subtitle in Configuration and Installation:
1) Configure Server Certificate and Key for Harbor
2) Configure Server Certificate, Key and CA for Docker
3) Configure Harbor
3. Use yourdomain.com instead of reg.yourdomain.com throughout the article for better understanding.
Signed-off-by: jeffweilee <jeffweilee@gmail.com>
Update configure_https.md
1. There is no need to have Getting Client Certificate Section. All we need is CA and Server Certificate.
2. Modify subtitle in Configuration and Installation:
1) Configure Server Certificate and Key for Harbor
2) Configure Server Certificate, Key and CA for Docker
3) Configure Harbor
3. Use yourdomain.com instead of reg.yourdomain.com throughout the article for better understanding.
Signed-off-by: jeffweilee <jeffweilee@gmail.com>
rebase PR of Refine Configure_https.md
Signed-off-by: jeffweilee <jeffweilee@gmail.com>
signoff
Signed-off-by: jeffweilee <jeffweilee@gmail.com>
There's an issue in registry 2.6.x, that when the webhook is sent the
manifest of the image may not be written.
For details: https://github.com/docker/distribution/issues/2625
This will cause issue in "scan on push" or replication.
This commit mitigates the issue by adding retries in notification
handler.
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
Some configuration files and env files contain sensitive information,
they should not be readable by any user by default.
This commit updates the `prepare` script to update the mask of the
rendered files.
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
Update the entrypoint to allow the image accept other parms,
to help debug in the future.
If replace "$*" with "$@" only one parm will be passed to dumbinit
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
Currently, we pass the external URL as the source registry and set insecure as true in replication, this causes security issue. This commit replaces the URL with the internal one and set insecure to false. Fixes#6109.
Signed-off-by: Wenkai Yin <yinw@vmware.com>
This commit is to add the clair_version into the harbor images, then clair
will use it in the user-agent, and helpful for the debugging.
Signed-off-by: wang yan <wangyan@vmware.com>
