2 How to do replication with Robot Account

Wang Yan edited this page 2021-11-09 12:05:15 +08:00

It requires Harbor v2.4.0+, and only system level robot can do replication between Harbor instances.

Let's assume that you have two Harbor instances, Harbor A(source) and Harbor B(target).

• Pull mode(A pull from B):

The robot account that created on Harbor B needs at least these three permissions of the configured namespace:

1. Pull Repository
2. List Artifact
3. List Repository

The Resource in the replication rule on Harbor A must be set to image or artifact. Since it doesn't support robot to replication charts in the chartmuseum.

• Push mode(A push to B):

The robot account that created on Harbor B needs at least the two permissions.

1. Push Repository
2. Pull Repository

The Resource in the replication rule on Harbor A must be set to image or artifact. Since it doesn't support robot to replication charts in the chartmuseum.

The destination namespace in the replication rule on Harbor A:

1. If it is an non-exist namespace, the permission of robot on Harbor B must be set to Cover all projects.
2. If it is an existing namespace, the robot on Harbor B must at least have the access scope of the existing namespace.