k8sjp#15_KubeCon-recap_Harbor&Dragonfly_by capsmalt

Slide 1

Slide 1 text

2 82 5 95 5 55 0 # 5 9 /52 5 # 5 2 # ! #!# 2 5@ 152

Slide 2

Slide 2 text

Slide 3

Slide 3 text

3 ( "## " # %$ "$$ &#$ & !" & $ Cloud Native Meetup Tokyo Cloud Native Developer JP %$&(+,*)' > @ ) ) ) <

Slide 4

Slide 4 text

Slide 5

Slide 5 text

Slide 6

Slide 6 text

Slide 7

Slide 7 text

7 W ( : . A7 : ) : Y _( ( 7 7E7 +A 7( ( G 7 /1 8 & EDH T_Z V SYcbM W A C a F JD :

Slide 8

Slide 8 text

8 Runtime Runtime Runtime Service Endpoint Images Harbor Dragonfly Content Cache Image Management Image Distribution P2P Distribute (pull)

Slide 9

Slide 9 text

9 Runtime Runtime Runtime Service Endpoint Images Harbor Dragonfly Content Cache Image Management Image Distribution P2P Full Stack Image Management Distribute (pull)

Slide 10

Slide 10 text

10 v K / v7 BRBK Q /BK E KD S B vE MO H K & O EBA J BRBK . , vE MO Q Q B :S. O v I Q K FKB FVBA ,KRF KJBK O 1 FK : H C / KA D KCI v1F Q IIBK 7QK vE MO H K & O EBA J BRBK . E vhttps://youtu.be/kskWZsf_7oE v BBM FRB / v8 K 1F KD 1F Q S B vE MO H K & O EBA J BRBK . B vE MO Q Q B 2G T O8 Whin jldecfgkpbomZ X Ya

Slide 11

Slide 11 text

11 v + v + v + v + + v

Slide 12

Slide 12 text

12 + 1 0 0 v o o • KC • A C • C o o :

Slide 13

Slide 13 text

13 1 vT 8 o ( K 12 ( o Do P • M • e PM • vo ots od o )05 0 21/BG vr

Slide 14

Slide 14 text

14 v v ( v ) )

Slide 15

Slide 15 text

15 0 1

Slide 16

Slide 16 text

Slide 17

Slide 17 text

Slide 18

Slide 18 text

18 0 0 1

Slide 19

Slide 19 text

19 ( ) 0 G 1 B( (

Slide 20

Slide 20 text

Slide 21

Slide 21 text

21 2017

Slide 22

Slide 22 text

22 2018 2017

Slide 23

Slide 23 text

23 2019 2018 2017

Slide 24

Slide 24 text

24 2019 2018 2017

Slide 25

Slide 25 text

25 n I n P n n P n n D ) ) ( / /T/ / 25

Slide 26

Slide 26 text

Slide 27

Slide 27 text

27 ('%! " " #$& DockerHub 100('%

Slide 28

Slide 28 text

28 F + f g eab E + YFW d DC H J F :

Slide 29

Slide 29 text

29 v VF MN o ( 1 2:8 : 0 1: 0 1: o ( : 0 1: : o/ 0 ) 0 a o).) 2 10 : C vb oI N oH F o F MN • F M 8 ) 0

Slide 30

Slide 30 text

Slide 31

Slide 31 text

Slide 32

Slide 32 text

Slide 33

Slide 33 text

Slide 34

Slide 34 text

34 H • : • • • RBAC • AD/LDAP • • • Pull • : • Push • Pull Helm Chart • Helm Chart • a b • HA

Slide 35

Slide 35 text

35 ( )

Slide 36

Slide 36 text

36 API Routing Core Service (API/Auth/GUI/Chart) Image Registry Trusted Content Vulnerability Scanning Job Service Admin Service SQL Database Key/Value Storage Local or Remote Storage (block, file, object) Users (GUI/API) Container Schedulers/Runtimes LDAP/ AD Harbor components 3rd party components Persistence components Consumers Supporting services Harbor Packaging Docker Kubernetes Cloud Foundry Chart Museum

Slide 37

Slide 37 text

37 Proxy Portal Registry Job service Database Admin Service Notary Notary server Clair Redis Notary signer CVE Datasources Core Service K8sL Ingress a Harbor O C GUI API Postgres Harbor B W HelmI CH DockerI CH Chart museum Other Harbor Instance LDAP/AD

Slide 38

Slide 38 text

38 Dev Registry CI Git Test Registry images images images Staging Registry images images Images are synchronized between environments by using Harbor registry. Production Registry images

Slide 39

Slide 39 text

39 )( ) Members Images Guest: Developer: Admin: docker pull ... docker pull/push Project operation & management Settings 3 3

Slide 40

Slide 40 text

40 4 $ 3 2 4 C . C 4 4 4 C 4 C 4 2 3 4 3 2 4 C 3 4 I P I 4 C 4 C v RN F ( () 2C1 42 o I ,C o I ,C SV

Slide 41

Slide 41 text

41 v Ia . ) A v bd Hec o B AB E B ( A o . ) A B AD A o + BC B AD A o o , o A API Registry V2 Job Service Console DB Harbor Save Data Pull Layers Scan Get Info Dispatch Jobs REST CVE Repos Retrieve vulnerability metadata 0 1 2 3 4 5 6 Clair v OLV U o O N o S o TR

Slide 42

Slide 42 text

42 Initial Replication Incremental Target Repo Source Repo Target Pro Source pro Trigger Policies Filters

Slide 43

Slide 43 text

43 Docker Client push pull pull

Slide 44

Slide 44 text

44 • Identical images across multiple sites • Image backup • Local access

Slide 45

Slide 45 text

Slide 46

Slide 46 text

46 v Helm Chart v v v ) Helm) o o o

Slide 47

Slide 47 text

Slide 48

Slide 48 text

48 v. . DS P N D id S v 7 1 2 0 : 8 0 : 8 v 7 v(871010 Fba v /0: 1 A vf v D DS v gl DS ap v hCS D G n m oc

Slide 49

Slide 49 text

49 INTEGRATIONS

Slide 50

Slide 50 text

50 D v o D I o g P l ( - 2 v o O i o NC ) v o D Iae v : o o ( M M I O o n D I

Slide 51

Slide 51 text

51 "! v o o ( o 0G ) ( o G v o ( 1 B .) o 0 ( .)

Slide 52

Slide 52 text

52 D A 1 v o o ( o B ( g g v o ( e 0 o G( .0 1 1 I B G 1 )

Slide 53

Slide 53 text

Slide 54

Slide 54 text

Slide 55

Slide 55 text

55 v : I o 3 3 3 N o 3& D C 3 o M C P N

Slide 56

Slide 56 text

Slide 57

Slide 57 text

57 1. Pull 2. SuperNode Pull /* 3. (41.%$) ! 4. Peer 02 5. (Peer & "-/ 6. ( "#" ('Pull)+,3

Slide 58

Slide 58 text

58 Harbor • Dragonfly • Cooperation • Harbor SuperNode Supported Future Policy based trigger

Slide 59

Slide 59 text

59 Runtime Runtime Runtime Service Endpoint Images Harbor Dragonfly Content Cache Image Management Image Distribution P2P Distribute (pull)

Slide 60

Slide 60 text

60 Runtime Runtime Runtime Service Endpoint Images Harbor Dragonfly Content Cache Image Management Image Distribution P2P Full Stack Image Management Distribute (pull)

Slide 61

Slide 61 text

61 F ) f g + eab E YFW d DC H J F :

Slide 62

Slide 62 text

62 v 2 o [N C H o F A: C P P v 2 o C o C :C o in: lg v ] [H D P f ar v 2 C b v 2 C b

Slide 63

Slide 63 text

Slide 64

Slide 64 text

64 ./ / .

Slide 65

Slide 65 text

65 v v v v v v v IA CDFB v v v v CNCF Cloud Native Landscape GJ

Slide 66

Slide 66 text

66 C

Slide 67

Slide 67 text

67 v +

Slide 68

Slide 68 text

68 v O K S ( )( ( / H

Slide 69

Slide 69 text

69 v_26#3.8*+.7 P o #5*K MD:ID%++5! o 8 HA? !CR Harbor!! v&6$/8*+.7(1+ P o #5*K U> KV ? o 8 W< U>G@N\Harbor v )+-4B=MD KV o HZ #5* P #5*`]F^T/IDYSG@QD o '9-0#5*LO"&,+E[XJ ;KVP!

Slide 70

Slide 70 text

70 ( ) ( ( / - . - ./ / / - / . - .- .

Slide 71

Slide 71 text

Slide 72

Slide 72 text

72 ) ( ) v K v 1 : 2 v 9 v 9 0 v 1 2 9 0 1 0 1 9 v-/ +: C 2 : H v IC. 2 ( ) ( P

Slide 73

Slide 73 text

73 ) (

Slide 74

Slide 74 text

Slide 75

Slide 75 text

75 IBM Cloud Kubernetes Service (IKS) IBM Cloud Private (ICP) OSS