Harbor
Harbor is an open-source, CNCF-graduated container registry that stores, signs, and scans OCI images and Helm charts for vulnerabilities before they are deployed. It adds enterprise features such as role-based access control, image replication between registries, and audit logging on top of standard registry functionality.
What gets deployed with it
- PostgreSQL HA Cluster — required Harbor requires a durable relational backing store for registry metadata, user accounts, replication rules, and audit logs. Embedded databases are not supported in production.
Baseline topologies
| Topology | Minimum nodes | Roles |
|---|---|---|
| registry-core-colocated | 1 | harbor-core |
| registry-core-split-jobservice | 2 | harbor-core, harbor-jobservice |
What drives the cost
- Registry storage volume (GB)
- Total externally mounted storage volume allocated for artifact layers, manifests, and Helm chart storage. This is operator-provisioned and not used for compute offer selection.
- Concurrent push/pull requests
- Peak number of simultaneous push or pull operations against the registry, driving jobservice and core thread capacity.
- Replication targets
- Number of remote replication endpoints that Harbor must push artifacts to via replication rules. Each active replication rule adds background jobservice queue pressure.
Where it runs
bare_metal, dedicated, cloud_vm
Size Harbor and get a cost estimate