& access control • RBAC: admin, developer, guest • AD/LDAP integration • Policy based image replication • Web UI ( 中文 and English) • Audit and logs • Restful API for integration • Lightweight and easy Replication Service 15 Remote Harbor instance Image Replication between Registry Instances 16 Project Images Policy Image Project Images Initial replication Image Incremental Incremental replication (including image deletion) Image Replication Use Case(1) • Image distribution for large cluster • Load balancing 17 Master – Slave Docker Client push Docker host Docker

& access control – RBAC: admin, developer, guest – AD/LDAP integration • Policy based image replication • Vulnerability Scanning • Notary • Web UI • Audit and logs • Restful API for integration Replication Job Services Notary client Remote Harbor Instance Notary Registry V2 Vulnerability Scanning Admin Service Harbor users and partners (selected) 12 Image replication (synchronization) (synchronization) 13 Project Images Policy Image Project Images Initial replication Image incremental replication (including image deletion) Agenda 1 Container Image Basics 2 Project Harbor Introduction

Identity integration and role-based access control − Security and vulnerability analysis − Image replication between instances − Internationalization (currently English and Chinese) Operational experience jar Dockerfile Challenges Image replication (synchronization) 17 Project Images Policy Image Project Images Initial replication Image Incremental replication (including image deletion) Shipping synchronized between environments by using Harbor registry. Production Registry images Global Image Replication 19 • Identical images across multiple sites • Image backup • Local access Agenda 1 Containers

Confidential � ©2018 VMware, Inc. • Isolation • Access Control • Vulnerability • Content Trust • Replication • Control Policy SECURITY DISTRIBUTION RELIABILITY DEPLOYMENT OVERVIEW • HA Supporting • Helm VMware, Inc. Replication Policy DISTRIBUTION ���� • �������� • ������� • ������� • ���� ���� Image Replication • ���� • ���� • ���� • ����� • ������ ���� Initial Replication Incremental Docker Distribution Helm Chart Repository Asynchronization Signature Vulnerability Scanning Replication Service Level Agreement (Authorization) SLA: Tenant Mapping (Project) SLA: Flow Control Log

Confidential � ©2018 VMware, Inc. • Isolation • Access Control • Vulnerability • Content Trust • Replication • Control Policy SECURITY DISTRIBUTION RELIABILITY DEPLOYMENT OVERVIEW • HA Supporting • Helm VMware, Inc. Replication Policy DISTRIBUTION ���� • �������� • ������� • ������� • ���� ���� Image Replication • ���� • ���� • ���� • ����� • ������ ���� Initial Replication Incremental Docker Distribution Helm Chart Repository Asynchronization Signature Vulnerability Scanning Replication Service Level Agreement (Authorization) SLA: Tenant Mapping (Project) SLA: Flow Control Log

capabilities • Batch operations Restful API • Complete API for integration • Swagger API doc Replication • Multiple filters support • Schedule, immediate and manual trigger Access Control • RBAC

Browser Auth UI DB AD / LDAP Core Service Log Collector Replication Job Services Notary client Remote Harbor Instance Notary Registry V2 Vulnerability