Project: Harbor (Provisioning / Container Registry)
File: CHANGELOG.md

Support for OpenID Connect - OpenID Connect (OIDC) is an authentication layer on top of OAuth 2.0, allowing Harbor to verify the identity of users based on the authentication performed by an external authorization server or identity provider. Robot accounts - Robot accounts can be configured to provide administrators with a token that can be granted appropriate permissions for pulling or pushing images. Harbor users can continue operating Harbor using their enterprise SSO credentials, and use robot accounts for CI/CD systems that perform Docker client commands. Replication advancements - Harbor new version replication allows you to replicate your Harbor repository to and from non-Harbor registries. Harbor 1.8 expands on the Harbor-to-Harbor replication feature, adding the ability to replicate resources between Harbor and Docker Hub, Docker Registry, and Huawei Registry. This is enabled through both push and pull mode replication. Health check API, showing detailed status and health of all Harbor components. Support for defining cron-based scheduled tasks in the Harbor UI. Administrators can now use cron strings to define the schedule of a job. Scan, garbage collection and replication jobs are all supported. API explorer integration. End users can now explore and trigger Harbors API via the swagger UI nested inside Harbors UI. Introduce a new master role to project, the role's permissions are more than developer and less than project admin. Introduce harbor.yml as the replacement of harbor.cfg and refactor the prepare script to provide more flexibility to the installation process based on docker-compose Enhancement of the Job Service engine to include webhook events, additional APIs for automation, and numerous bug fixes to improve the stability of the service. Docker Registry upgraded to v2.7.1. Bumped up Clair to v2.0.8 Fixed issues in supporting windows images. #6992 #6369 Removed user-agent check-in notification handler. #5729 Fixed the issue global search not working if chartmuseum is not installed #6753 Support deploy Harbor with Helm Chart, enables the user to have high availability of Harbor services, refer to the . Support on-demand Garbage Collection, enables the admin to configure run docker registry garbage collection manually or automatically with a cron schedule. Support Image Retag, enables the user to tag image to different repositories and projects, this is particularly useful in cases when images need to be retagged programmatically in a CI pipeline. Support Image Build History, makes it easy to see the contents of a container image, refer to the . Support Logger customization, enables the user to customize STDOUT / STDERR / FILE / DB logger of running jobs. Improve user experience of Helm Chart Repository: Chart searching included in the global search results Show chart versions total number in the chart list Mark labels to helm charts The latest version can be downloaded as default one on the chart list view The chart can be deleted by deleting all the versions under it Support manages Helm Charts: From version 1.6.0, Harbor is upgraded to be a composite cloud-native registry, which supports both image management and helm charts

Support LDAP group: User can import an LDAP/AD group to Harbor and assign project roles to it. Replicate images with label filter: Use newly added label filter to narrow down the sourcing image list when doing image replication. Migrate multiple databases to one unified PostgreSQL database. Support read-only mode for registry: Admin can set registry to read-only mode before GC. Label support: User can add label to image/repository, and filter images by label on UI/API. Show repositories via Cardview. Re-work Job service to make it HA ready. Replication policy rework to support wildcard, scheduled replication. Support repository level description. Batch operation on projects/repositories/users from UI. On board LDAP user when adding member to a project. Project level policies for blocking the pull of images with vulnerabilities and unknown provenance. Remote certificate verification of replication moved to target level. Refined all images to improve security. Authentication and authorization, implementing vCenter Single Sign On across components and role-based access control at the project level. Full integration of the vSphere Integrated Containers Registry and Management Portal user interfaces. Image vulnerabilities scanning. Add in Notary support User can update configuration through Harbor UI Redesign of Harbor's UI using Clarity Some changes to API Fix some security issues in token service Upgrade base image of nginx for latest openssl version Various bug fixes. Refactor for a new build process Easier configuration for HTTPS in prepare script Script to collect logs of a Harbor deployment User can view the storage usage (default location) of Harbor. Add an attribute to disable normal user to create project Various bug fixes. For Harbor virtual appliance: Improve the bootstrap process of ova installation. Enable HTTPS by default for .ova deployment, users can download the default root cert from UI for docker client or VCH. Preload a photon:1.0 image to Harbor for users who have no internet connection. Virtual appliance of Harbor for vSphere. Refactor for new build process. Easier configuration for HTTPS in prepare step. Updated documents. Various bug fixes. Database schema changed, data migration/upgrade is needed for previous version. A project can be deleted when no images and policies are under it. Deleted users can be recreated. Replication policy can be deleted. Enhanced LDAP authentication, allowing multiple uid attributes. Pagination in UI. Improved authentication for remote image replication. Display release version in UI Offline installer. Various bug fixes. Vendoring all dependencies and remove go get from dockerfile Installer using Docker Hub to download images Harbor base images moved to Photon OS (except for official images from third party) New Harbor logo Various bug fixes Database schema changed, data migration/upgrade is needed for previous version. New UI Image replication across multiple registry instances Integration with registry v2.4.0 to support image deletion and garbage collection Database migration tool Bug fixes Refactored database schema Migrate to docker-compose v2 template Update token service to support layer mount Various bug fixes Initial release, key features include Role based access control (RBAC) LDAP / AD integration Graphical user interface (GUI) Auditing and logging RESTful API Internationalization