ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Harbor 2.6+ lets you mark image tags immutable via a native API, blocking any overwrite at the registry level. This guide compares native immutability with CI gates and Notary signing, shows the exact curl commands to enable and verify a tag, and lists the operational limits you must consider.
Decide which Harbor replication mode—Scheduled Pull, Webhook Push, or Proxy Cache—best fits your multi‑site setup. Compare latency, bandwidth, security and operator effort, then validate with concrete API calls and digest checks.
Immutable tag enforcement in Harbor blocks overwriting an existing tag digest at push time, making image promotion reproducible and preventing silent drift in CI/CD pipelines.
Keep AKS image pulls off the public internet by pairing an ACR Private Endpoint with Private DNS and a managed identity.
Learn how Harbor’s image replication feature can keep your container images in sync across regions, with a hands‑on example, trade‑offs, and next‑step guidance.
Learn how to lock down container image tags in Harbor so that once an image is pushed it can’t be overwritten. The guide covers prerequisites, UI and API steps, validation checks, and recovery options so you can protect production releases without breaking CI pipelines.
Use Harbor proxy cache as a pull-through mirror for Docker Hub to reduce external pulls and protect CI from rate limits without changing client commands.
A diagnostic guide for resolving Harbor 'ImagePullBackOff' and 401/403 errors by auditing project visibility, Robot Account tokens, and Kubernetes ImagePullSecrets.
Use OpenShift's built-in image registry for CI/CD: push once, promote tags with image streams, and avoid rebuilding images between environments.
harbor
docker
kubernetes