Harbor
What is Harbor
From https://goharbor.io
note
Harbor is an open source container image registry that secures images with role-based access control, scans images for vulnerabilities, and signs images as trusted. A CNCF Incubating project, Harbor delivers compliance, performance, and interoperability to help you consistently and securely manage images across cloud native compute platforms like Kubernetes and Docker.
Preparation
The following placeholders will be used:
harbor.company
is the FQDN of the Harbor install.authentik.company
is the FQDN of the authentik install.
Create an application in authentik. Create an OpenID provider with the following parameters:
- Client Type:
Confidential
- Response types:
code (Authorization Code Flow)
- JWT Algorithm:
RS256
- Redirect URIs:
https://harbor.company/c/oidc/callback
- Scopes:
openid