harbor-users@lists.cncf.io

Accepted: [EXT] [harbor-users] Harbor Community Meeting - China/Europe Time zone

Ned Hanks

#201

Ned Hanks
Sr Cloud Engineer
office +1 801 483 3356

Harbor Community Meeting - China/Europe Time zone

Jonas Rosland

#200

Hello everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor community meetings.
There will be two meetings, one for China/Europe time zone, and one for Americas time zone
Please pick the one that fits your schedule best.
 
To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, and recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md
and
https://github.com/goharbor/community/tree/master/conf-calls

Calendar

Harbor Community Meeting - China/Europe Time zone

Jonas Rosland

#199

Hello everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor community meetings.
There will be two meetings, one for China/Europe time zone, and one for Americas time zone
Please pick the one that fits your schedule best.
 
To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, and recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md
and
https://github.com/goharbor/community/tree/master/conf-calls

Calendar

Harbor on EC2 vs EKS pricing

@Sumukha

#198

Hello Community,

I am exploring different methods to host Harbor server. I came across hosting Harbor on an EC2 instance which is by following steps from the installer guide as well as provisioning Harbor on Kubernetes using Helm charts. For the Kubernetes option, I was thinking of Amazon EKS.

While it might take some time to analyze the cost between these options, I am requesting this community's help for advice on which would be the better option in terms of better pricing and scaling (in future).

Any thoughts / suggestions is much appreciated.

Thanks and Regards,
SKP

Re: Scanner support

Steven Zou

#197

Hi Hiten,

The rest API spec for the scanner adapter is defined here: https://github.com/goharbor/pluggable-scanner-spec .

The cliar adapter implementation can be a good example for you: https://github.com/goharbor/harbor-scanner-clair

thanks&regards

--

邹佳

Steven Zou (he/him/his)

Engineer, MAP(Modern Application Platform), VMware R&D | Harbor Maintainer

Mail: szou@...

GitHub: github.com/steven-zou

Cell: +8618600021252

Addr: 9F Tower C, Raycom Info Tech Park, No. 2 Kexueyuan South Road Haidian District, Beijing 100738 China

From: <harbor-users@...> on behalf of "Hiten Shah via lists.cncf.io" <hitenps11=gmail.com@...>
Reply-To: "harbor-users@..." <harbor-users@...>
Date: Monday, December 21, 2020 at 15:45
To: "harbor-users@..." <harbor-users@...>
Subject: [harbor-users] Scanner support

Hello All,

I am looking for some developer guide for scanner adapters. What all things a scanner needs to implement, like endpoints, apis etc.

Any guide for the same would be really helpful.

Thanks & Regards,

Hiten Shah

Scanner support

Hiten Shah

#196

Hello All,

I am looking for some developer guide for scanner adapters. What all things a scanner needs to implement, like endpoints, apis etc.

Any guide for the same would be really helpful.

Thanks & Regards,

Hiten Shah

cancelling 12.30 community meeting

Alex Xu

#195

Hey everyone,

We're cancelling the Harbor community meeting on 12.30 to take a break for the holidays. If you have anything urgent to discuss, please reach out here or in slack. Thanks!

Non-critical severity vulnerability in Harbor (CVE-2020-29662） #security

Alex Xu

#194

Attention Harbor users,

A new Harbor security advisory has been published at https://github.com/goharbor/harbor/security/advisories/GHSA-38r5-34mr-mvm7

The vulnerability has already been fixed in the newly released v2.1.2 and v2.0.5. Please upgrade to these versions as soon as possible. If you have any concerns about this timeline, please reach out to us.

Description

Javier Provecho, member of the TCCT (Telefonica Cloud & Cybersecurity Tech) SRE team discovered a vulnerability regarding Harbor’s v2 API.

The catalog’s registry v2 api is exposed on an unauthenticated path. The current catalog API path is served at the following path and it requires to be authenticated as an admin.

GET /v2/_catalog

However, the authorization can be bypassed by using the following path

GET /v2/_catalog/

Patches

If your product uses the affected releases of Harbor, update to either version v2.1.2 or v2.0.5 to fix this issue immediately

https://github.com/goharbor/harbor/releases/tag/v2.1.2
https://github.com/goharbor/harbor/releases/tag/v2.0.5

Workarounds

If you cannot access a patched release at this time, it can be mitigated by disabling that API. For example, redirecting it to a 404 sink hole in the ingress.

For more information

If you have any questions or comments about this advisory, contact cncf-harbor-security@...
View our security policy at https://github.com/goharbor/harbor/security/policy
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29662

Harbor API support to push helm charts and docker images

Nidhi Kalkur

#193

Hi,

I am new to harbor. I was able to upload helm charts to harbor via CLI i.e. https://goharbor.io/docs/1.10/working-with-projects/working-with-images/managing-helm-charts/

and was able to push docker images via docker login and docker push.

I wanted to know whether

a) We can upload helm charts to harbor via harbor API
b) And can we upload docker images to harbor via harbor API.

If possible any reference document would be of great help.

Thanks and regards,

Harbor Office Hours info

Jonas Rosland

#192

Hi everyone!

Today we sent out invites for the new Harbor Office Hours. These will take the place of the previous Americas community meetings, so feel free to delete those from your calendar if you haven't already.

The Harbor Office Hours is a place where you can ask questions like "how does Harbor work?", "how do I do this in Harbor?", and "how do I get started contributing to Harbor?”.

We had some great discussions at the Harbor Office Hours last week, and we are looking forward to more lively discussions and questions from you all.

The invites sent are currently for the 2nd Wednesday of every month, and starting in January we will expand them to also be on the 4th Wednesday of every month.

See you all at the office hours next week!

Best,
—
Jonas Rosland (he/him)
Head of Community Management

Modern Applications Platform @ VMware
Phone: +1 (925) 335 6627
Twitter: @jonasrosland

Event: Harbor Office Hours - 2nd Wednesday #cal-invite

harbor-users@lists.cncf.io Calendar <noreply@...>

#191

Harbor Office Hours - 2nd Wednesday

When:
Wednesday, 11 November 2020
1:00pm to 2:00pm
(UTC-05:00) America/New York
Repeats: Monthly on the second Wednesday

Where:
https://zoom.us/j/98160556477?pwd=ZzhUa3VteFJQK2VXbWJxMHRQY0JmUT09

An RSVP is requested. Click here to RSVP

Description:

Come join us for the Harbor Office Hours every 2nd and 4th Wednesday at 1pm ET / 10am PT.

The Harbor Office Hours is a place where you can ask questions like "how does Harbor work?", "how do I do this in Harbor?", and "how do I get started contributing to Harbor?"

Meeting notes and agenda: https://hackmd.io/qjTVtIOnTU6vbEH32RIE0w

CNCF Harbor is inviting you to a scheduled Zoom meeting.

Join Zoom Meeting

https://zoom.us/j/98160556477?pwd=ZzhUa3VteFJQK2VXbWJxMHRQY0JmUT09

Meeting ID: 981 6055 6477

Passcode: 5313661231

One tap mobile

+16465588656,,98160556477# US (New York)

+13017158592,,98160556477# US (Washington D.C)

Dial by your location

+1 646 558 8656 US (New York)

+1 301 715 8592 US (Washington D.C)

+1 312 626 6799 US (Chicago)

+1 669 900 6833 US (San Jose)

+1 253 215 8782 US (Tacoma)

+1 346 248 7799 US (Houston)

877 369 0926 US Toll-free

855 880 1246 US Toll-free

+1 778 907 2071 Canada

+1 204 272 7920 Canada

+1 438 809 7799 Canada

+1 587 328 1099 Canada

+1 647 374 4685 Canada

+1 647 558 0588 Canada

855 703 8985 Canada Toll-free

Meeting ID: 981 6055 6477

Find your local number: https://zoom.us/u/adyobhXLwo

Calendar

Updated Event: Harbor Community Meeting (USA) #cal-invite

harbor-users@lists.cncf.io Calendar <noreply@...>

#190

Harbor Community Meeting (USA)

When:
Wednesday, 4 November 2020
1:00pm to 1:30pm
(UTC-08:00) America/Los Angeles
Repeats: Every 4 weeks on Wednesday, through Tuesday, 3 November 2020

Organizer: CNCF-Harbor 67c5de1sqt4d5t379oi0r1ruc4@...

Description:
hello everyone, Updating the time for the USA community meeting of Harbor to a friendlier time. This is a recurring calendar invite for the monthly Harbor community meeting. There are two meetings, one for USA (every four weeks) and one for China/Europe (every two weeks). You only need to attend one of them. To attend, use the following Zoom link: <a href="https://zoom.us/j/734959521">https://zoom.us/j/734959521</a> Meeting notes, agenda, recordings of past meetings and other details are located at <a href="https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md">https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md</a> and <a href="https://github.com/goharbor/community/tree/master/conf-calls">https://github.com/goharbor/community/tree/master/conf-calls</a>

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-
Please do not edit this section of the description.

View your event at https://www.google.com/calendar/event?action=VIEW&eid=czUwN2ticzFuM3E4c2xxMnVyOWp2bTZsZjcgaGFyYm9yLXVzZXJzQGxpc3RzLmNuY2YuaW8&tok=NTIjNjdjNWRlMXNxdDRkNXQzNzlvaTByMXJ1YzRAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbTM0MDE4M2U3NDJhYzllZTliYTg4ZDA2NWNmZDAyZWFiOTU2NGFjMzE&ctz=America%2FChicago&hl=en&es=1.
-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Calendar

Updated Event: Harbor Community Meeting (USA) #cal-invite

harbor-users@lists.cncf.io Calendar <noreply@...>

#189

Harbor Community Meeting (USA)

When:
Wednesday, 4 December 2019
1:00pm to 1:30pm
(UTC-08:00) America/Los Angeles
Repeats: Every 2 weeks on Wednesday, through Tuesday, 3 November 2020

Organizer: CNCF-Harbor 67c5de1sqt4d5t379oi0r1ruc4@...

Description:
hello everyone, Updating the time for the USA community meeting of Harbor to a friendlier time. This is a recurring calendar invite for the bi-weekly Harbor community meetings. There will be two meetings, one for USA and one for China/Europe. You only need to attend one of them. To attend, use the following Zoom link: <a href="https://zoom.us/j/734959521" target="_blank">https://zoom.us/j/734959521</a> Meeting notes, agenda, recordings of past meetings and other details are located at <a href="https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md" target="_blank" id="ow410" __is_owner="true">https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md</a> and <a href="https://github.com/goharbor/community/tree/master/conf-calls" target="_blank" id="ow416" __is_owner="true">https://github.com/goharbor/community/tree/master/conf-calls</a>

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-
Please do not edit this section of the description.

View your event at https://www.google.com/calendar/event?action=VIEW&eid=NXA0ZmJ0cmptaDVzY3JkNGhjOTA4cTBxazRfUjIwMTkxMjA0VDIxMDAwMCBoYXJib3ItdXNlcnNAbGlzdHMuY25jZi5pbw&tok=NTIjNjdjNWRlMXNxdDRkNXQzNzlvaTByMXJ1YzRAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbTQ5ZDUwM2M5MWQ5YmY5OTUyYTY4ZGU4ZThkYzk4NTY5YzA5Mzg5MzY&ctz=America%2FChicago&hl=en&es=1.
-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Calendar

Updated Event: Harbor Community Meeting (USA) #cal-invite

harbor-users@lists.cncf.io Calendar <noreply@...>

#188

Harbor Community Meeting (USA)

When:
Wednesday, 4 November 2020
1:00pm to 1:30pm
(UTC-08:00) America/Los Angeles
Repeats: Every 4 weeks on Wednesday, through Tuesday, 29 December 2020

Organizer: CNCF-Harbor 67c5de1sqt4d5t379oi0r1ruc4@...

Description:
hello everyone, Updating the time for the USA community meeting of Harbor to a friendlier time. This is a recurring calendar invite for the monthly Harbor community meeting. There are two meetings, one for USA (every four weeks) and one for China/Europe (every two weeks). You only need to attend one of them. To attend, use the following Zoom link: <a href="https://zoom.us/j/734959521">https://zoom.us/j/734959521</a> Meeting notes, agenda, recordings of past meetings and other details are located at <a href="https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md">https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md</a> and <a href="https://github.com/goharbor/community/tree/master/conf-calls">https://github.com/goharbor/community/tree/master/conf-calls</a>

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-
Please do not edit this section of the description.

View your event at https://www.google.com/calendar/event?action=VIEW&eid=czUwN2ticzFuM3E4c2xxMnVyOWp2bTZsZjcgaGFyYm9yLXVzZXJzQGxpc3RzLmNuY2YuaW8&tok=NTIjNjdjNWRlMXNxdDRkNXQzNzlvaTByMXJ1YzRAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbTM0MDE4M2U3NDJhYzllZTliYTg4ZDA2NWNmZDAyZWFiOTU2NGFjMzE&ctz=America%2FChicago&hl=en&es=1.
-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Calendar

Updated Event: Harbor Community Meeting (USA) #cal-invite

harbor-users@lists.cncf.io Calendar <noreply@...>

#187

Harbor Community Meeting (USA)

When:
Wednesday, 4 December 2019
1:00pm to 1:30pm
(UTC-08:00) America/Los Angeles
Repeats: Every 2 weeks on Wednesday, through Tuesday, 1 December 2020

Organizer: CNCF-Harbor 67c5de1sqt4d5t379oi0r1ruc4@...

Description:
hello everyone, Updating the time for the USA community meeting of Harbor to a friendlier time. This is a recurring calendar invite for the bi-weekly Harbor community meetings. There will be two meetings, one for USA and one for China/Europe. You only need to attend one of them. To attend, use the following Zoom link: <a href="https://zoom.us/j/734959521" target="_blank">https://zoom.us/j/734959521</a> Meeting notes, agenda, recordings of past meetings and other details are located at <a href="https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md" target="_blank" id="ow410" __is_owner="true">https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md</a> and <a href="https://github.com/goharbor/community/tree/master/conf-calls" target="_blank" id="ow416" __is_owner="true">https://github.com/goharbor/community/tree/master/conf-calls</a>

-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-
Please do not edit this section of the description.

View your event at https://www.google.com/calendar/event?action=VIEW&eid=NXA0ZmJ0cmptaDVzY3JkNGhjOTA4cTBxazRfUjIwMTkxMjA0VDIxMDAwMCBoYXJib3ItdXNlcnNAbGlzdHMuY25jZi5pbw&tok=NTIjNjdjNWRlMXNxdDRkNXQzNzlvaTByMXJ1YzRAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbTQ5ZDUwM2M5MWQ5YmY5OTUyYTY4ZGU4ZThkYzk4NTY5YzA5Mzg5MzY&ctz=America%2FChicago&hl=en&es=1.
-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::-

Calendar

Invitation: Harbor Community Meeting (USA) @ Every 4 weeks from 3pm to 3:30pm on Wednesday (CST) (harbor-users@lists.cncf.io)

Michael Michael

#186

You have been invited to the following event.

Harbor Community Meeting (USA)

When

Every 4 weeks from 3pm to 3:30pm on Wednesday Central Time - Chicago

Calendar

harbor-users@...

Who

•	Michael Michael - creator
•	harbor-dev
•	michaelmi@...
•	harbor-users
•	meiselesb@...
•	harbor-users@...
•	harbor-dev@...
•	cncf-harbor-maintainers@...

more details »

hello everyone,

Updating the time for the USA community meeting of Harbor to a friendlier time. This is a recurring calendar invite for the monthly Harbor community meeting. There are two meetings, one for USA (every four weeks) and one for China/Europe (every two weeks). You only need to attend one of them.

To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md and https://github.com/goharbor/community/tree/master/conf-calls

Going (harbor-users@...)? All events in this series: Yes - Maybe - No more options »

Invitation from Google Calendar

You are receiving this courtesy email at the account harbor-users@... because you are an attendee of this event.

To stop receiving future updates for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar.

Forwarding this invitation could allow any recipient to send a response to the organizer and be added to the guest list, or invite others regardless of their own invitation status, or to modify your RSVP. Learn More.

Calendar

Event: Harbor Office Hours! - Wednesday, 28 October 2020 #cal-invite

harbor-users@lists.cncf.io Calendar <noreply@...>

#185

Harbor Office Hours!

When:
Wednesday, 28 October 2020
1:00pm to 3:00pm
(UTC-04:00) America/New York

Where:
https://zoom.us/j/99762357843

Description:

Come join the Harbor Office Hours, a place where you can ask questions like "how does Harbor work", “how do I do this in Harbor” and “why does Harbor do this thing this way?”

This is meant as an informal meeting for both users and contributors where we answer your questions, help with configurations, and get you started contributing to Harbor.

---

CNCF Harbor is inviting you to a scheduled Zoom meeting.

Topic: Harbor Office Hours

Time: Oct 28, 2020 13:00 Eastern Time (US and Canada)

Join Zoom Meeting

https://zoom.us/j/99762357843

Meeting ID: 997 6235 7843

One tap mobile

+13017158592,,99762357843# US (Germantown)

+13126266799,,99762357843# US (Chicago)

Dial by your location

+1 301 715 8592 US (Germantown)

+1 312 626 6799 US (Chicago)

+1 646 558 8656 US (New York)

+1 253 215 8782 US (Tacoma)

+1 346 248 7799 US (Houston)

+1 669 900 6833 US (San Jose)

877 369 0926 US Toll-free

855 880 1246 US Toll-free

+1 647 374 4685 Canada

+1 647 558 0588 Canada

+1 778 907 2071 Canada

+1 204 272 7920 Canada

+1 438 809 7799 Canada

+1 587 328 1099 Canada

855 703 8985 Canada Toll-free

Meeting ID: 997 6235 7843

Find your local number: https://zoom.us/u/abQGnAtcND

Calendar

Upgrade from 2.0 to 2.1

patric@...

#184

Hi,

I have an installation av Harbor 2.0 and want to upgrade to 2.1
I can't really find any information on what needs to be done to upgrade.

Can I just run "docker-compose down", then download 2.1, replace harbor.yml from my 2.0 folder and run ./prepare and "docker-compose up -d"?
Or are there any other steps or things I need to think about?

Skipping Community Meeting this week #cal-cancelled

Alex Xu

#183

Hey everyone

We will not be holding the Harbor community meeting this week since the team is on national holiday. If there's anything urgent, please feel free to reach out on Slack. We will also start our Office Hours very soon.

Thanks,

The Harbor Team

Non-critical severity vulnerability in Harbor (CVE-2020-13794) #security

Alex Xu

#182

Attention Harbor users,

A new Harbor security advisory has been published at https://github.com/goharbor/harbor/security/advisories/GHSA-q9p8-33wc-h432

The vulnerability has already been fixed in the newly released v2.1.0 and v2.0.3. Please upgrade to these versions as soon as possible. If you have any concerns about this timeline, please reach out to us.

Description

Dutch Government Security Team has discovered an enumeration vulnerability that lists all users with their respective user_IDs when doing authenticated API calls (basic auth) to "/api/users/search?username=_"

CURL example:

curl -X GET "https://harbor.diensten.test.REDACTED.nl/api/users/search?username=_" -H "accept: application/json" --user REDACTED@...

The vulnerability was immediately fixed by the Harbor team and all supported versions were patched.

Known Attack Vectors

Successful exploitation of this issue will lead to enumeration of users and their IDs

**Patches

This is already patched in the v2.1.0 released today but we will also make the fix available in the upcoming v2.0.3

https://github.com/goharbor/harbor/releases/tag/v2.1.0

https://github.com/goharbor/harbor/releases/tag/v2.0.3

For more information

View our security policy at https://github.com/goharbor/harbor/security/policy

If you have any questions or comments about this advisory, please contact cncf-harbor-security@...

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13794