Date   

Now: Harbor Community Meeting - China/Europe Time zone - Wednesday, May 31, 2023 #cal-notice

Group Notification <noreply@...>
 

Harbor Community Meeting - China/Europe Time zone

When:
Wednesday, May 31, 2023
9:00pm to 10:00pm
(UTC+08:00) Asia/Shanghai

Where:
https://zoom.us/j/734959521

Organizer: CNCF Harbor Project - Orlin Vasilev orlin@...

View Event

Description:

Hello everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor community meetings.
There will be two meetings, one for China/Europe time zone, and one for Americas time zone
Please pick the one that fits your schedule best.
 
To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, and recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md
and
https://github.com/goharbor/community/tree/master/conf-calls


Event: Harbor Community Meeting - China/Europe Time zone - Wednesday, May 31, 2023 #cal-reminder

Group Notification <noreply@...>
 

Reminder: Harbor Community Meeting - China/Europe Time zone

When:
Wednesday, May 31, 2023
9:00pm to 10:00pm
(UTC+08:00) Asia/Shanghai

Where:
https://zoom.us/j/734959521

Organizer: CNCF Harbor Project - Orlin Vasilev orlin@...

View Event

Description:

Hello everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor community meetings.
There will be two meetings, one for China/Europe time zone, and one for Americas time zone
Please pick the one that fits your schedule best.
 
To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, and recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md
and
https://github.com/goharbor/community/tree/master/conf-calls


Now: Harbor Community Meeting - China/Europe Time zone - Wednesday, May 17, 2023 #cal-notice

Group Notification <noreply@...>
 

Harbor Community Meeting - China/Europe Time zone

When:
Wednesday, May 17, 2023
9:00pm to 10:00pm
(UTC+08:00) Asia/Shanghai

Where:
https://zoom.us/j/734959521

Organizer: CNCF Harbor Project - Orlin Vasilev orlin@...

View Event

Description:

Hello everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor community meetings.
There will be two meetings, one for China/Europe time zone, and one for Americas time zone
Please pick the one that fits your schedule best.
 
To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, and recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md
and
https://github.com/goharbor/community/tree/master/conf-calls


Event: Harbor Community Meeting - China/Europe Time zone - Wednesday, May 17, 2023 #cal-reminder

Group Notification <noreply@...>
 

Reminder: Harbor Community Meeting - China/Europe Time zone

When:
Wednesday, May 17, 2023
9:00pm to 10:00pm
(UTC+08:00) Asia/Shanghai

Where:
https://zoom.us/j/734959521

Organizer: CNCF Harbor Project - Orlin Vasilev orlin@...

View Event

Description:

Hello everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor community meetings.
There will be two meetings, one for China/Europe time zone, and one for Americas time zone
Please pick the one that fits your schedule best.
 
To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, and recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md
and
https://github.com/goharbor/community/tree/master/conf-calls


Migrating ⎈Helm charts to OCI ⎈ registry

Orlin Vasilev
 

Hello community,

Everyday the questions about ChartMuseum depreciation flows out on the surface.
At our Community meeting May 3rd it was clear that many folks are not reading the release notes closely enough, obviously myself including 🤣🤣 ...So in case you have also missed it we have a guide for migrating your current Helm Charts from the ChartMuseum to OCI Charts.

Please check it here and follow the wiki for more updates!

If you have any questions about the migration drop a line in the channel #harbor

Orlix


Now: Harbor Community Meeting - China/Europe Time zone - Wednesday, May 3, 2023 #cal-notice

Group Notification <noreply@...>
 

Harbor Community Meeting - China/Europe Time zone

When:
Wednesday, May 3, 2023
9:00pm to 10:00pm
(UTC+08:00) Asia/Shanghai

Where:
https://zoom.us/j/734959521

Organizer: CNCF Harbor Project - Orlin Vasilev orlin@...

View Event

Description:

Hello everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor community meetings.
There will be two meetings, one for China/Europe time zone, and one for Americas time zone
Please pick the one that fits your schedule best.
 
To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, and recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md
and
https://github.com/goharbor/community/tree/master/conf-calls


Event: Harbor Community Meeting - China/Europe Time zone - Wednesday, May 3, 2023 #cal-reminder

Group Notification <noreply@...>
 

Reminder: Harbor Community Meeting - China/Europe Time zone

When:
Wednesday, May 3, 2023
9:00pm to 10:00pm
(UTC+08:00) Asia/Shanghai

Where:
https://zoom.us/j/734959521

Organizer: CNCF Harbor Project - Orlin Vasilev orlin@...

View Event

Description:

Hello everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor community meetings.
There will be two meetings, one for China/Europe time zone, and one for Americas time zone
Please pick the one that fits your schedule best.
 
To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, and recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md
and
https://github.com/goharbor/community/tree/master/conf-calls


Updated Event: Harbor Community Meeting - China/Europe Time zone #cal-invite

Group Notification <noreply@...>
 

Harbor Community Meeting - China/Europe Time zone

When:
Wednesday, May 3, 2023
9:00pm to 10:00pm
(UTC+08:00) Asia/Shanghai
Repeats: Every 2 weeks on Wednesday

Where:
https://zoom.us/j/734959521

Organizer: CNCF Harbor Project - Orlin Vasilev orlin@...

View Event

Description:

Hello everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor community meetings.
There will be two meetings, one for China/Europe time zone, and one for Americas time zone
Please pick the one that fits your schedule best.
 
To attend, use the following Zoom link: https://zoom.us/j/734959521

Meeting notes, agenda, and recordings of past meetings and other details are located at https://github.com/goharbor/community/blob/master/MEETING_SCHEDULE.md
and
https://github.com/goharbor/community/tree/master/conf-calls


Cancelled Event: Harbor SIG Docs Meeting #cal-cancelled

Group Notification <noreply@...>
 

Cancelled: Harbor SIG Docs Meeting

This event has been cancelled.

When:
Wednesday, March 16, 2022
9:00pm to 10:00pm
(UTC+08:00) Asia/Shanghai
Repeats: Every 2 weeks on Wednesday

Where:
https://zoom.us/j/93754881831

Organizer: Abigail McCarthy

Description:

Hello Everyone,
 
This is a recurring calendar invite for the bi-weekly Harbor SIG Docs meeting. 
 
In this meeting we'll be chatting about all things docs and will be available to answer your questions about contributing. You can view the meeting's agenda at https://github.com/goharbor/community/wiki/SIG-Docs-meeting-agenda
 
We hope to see you there!
 
To attend, use the following Zoom link: https://zoom.us/j/93754881831
 
Thanks,

Abigail
Harbor Sig Docs Lead


🎉🎉🎉Release 2.8 - The KubeCon Release!🎉🎉🎉

Orlin Vasilev
 

Hello Community,

🎉🎉🎉Happy Harbor 2.8 Release - The KubeCon Release! We are super happy to kick off the week of KubeCon with new release. Check more here: https://goharbor.io/blog/harbor-2.8/…and see you at KubeCon!

Don't forget you can find the project(including me, Vadim and Yan) at KubeCon this week more info here:

Happy KubeCon-ing :)

Orlix
Harbor team


Harbor insecure default configuration when installed with Harbor-helm #security

daojunz
 

Attention Harbor Users:
I want to make everyone aware of the default insecure configuration in Harbor that was reported to us recently.

Impact

When installing Harbor with Harbor-helm, there is an option named core.secretName in the values.yaml.
If this configuration item is not specified when installing Harbor with Harbor-helm, it will use the default public/private key to sign the JWT token. which is used to push/pull images in Harbor.
Because the public/private key is public, it is possible for anyone to forge the JWT token and push/pull images in Harbor without any authentication.

The insecure configuration is not present in:

  • Harbor instances installed with harbor-helm where core.secretName is changed from the default to a specific value, or
  • Harbor instances installed with docker-compose, harbor-tile, TKG harbor( carvel packages).

Patches

The following Harbor-helm releases have a fix that removes the default insecure configuration possibility:

Harbor-helm: v1.3.18, v1.9.6, 1.10.4, and v1.11.1, In case Harbor is installed with these versions of Harbor-helm, the Harbor instance does not use the default insecure configuration.

Upgrading harbor-helm to a fixed version does NOT fix the issue in existing Harbor instances. The following workaround removes the insecure default configuration.

Note for users of Harbor robot accounts: Because robot accounts use the same key to generate a token, after applying the workaround or upgrading to the latest Harbor helm which fixes this issue, Harbor administrators need to regenerate the robot account token to allow them to log in to Harbor. If the robot account is marked as "Legacy" in the Web UI, administrators cannot rotate it, need to delete it and recreate a new robot account. The affected Harbor helm versions include 1.3.0 - 1.3.17, 1.4.x, 1.5.x, and 1.6.x.

Workarounds

  1. Generate a tls.crt and tls.key pair. make sure the tls.key is a rsa key. if not you need to convert it with OpenSSL.
openssl rsa -in tls.key -out tls.rsa
  1. Encode the tls.crt and tls.key with base64.
cat tls.crt | base64
cat tls.rsa | base64
  1. Create a yaml file and paste the content of base64 output in step 2.
apiVersion: v1
kind: Secret
metadata:
  name: my-tls-secret
type: kubernetes.io/tls
data:
  tls.crt: |
    <base64 encoding of tls.crt>
  tls.key: |
    <base64 encoding of tls.rsa>
  1. Create a secret with the yaml file.
kubectl -f secret.yaml
  1. Upgrade the instance with the new secret.
helm upgrade --reuse-values <installed_name> <path_to_harbor-helm> --set core.secretName=<secret_name>
  1. Verify if the current key is changed. compare it with the file: tls.key
kubectl exec -it <harbor-core-pod> -- /bin/bash
cat  /etc/core/private_key.pem

For more information

If you have any questions or comments about this advisory:

Open an issue in the Harbor repository

Credits

Thanks to Sam Erb from Google for reporting this issue.

For detailed information, please refer:  https://github.com/goharbor/harbor/security/advisories/GHSA-j7jh-fmcm-xxwv

Thank you!

The Harbor Team


Harbor at KubeCon Europe in Amsterdam

Orlin Vasilev
 

Hello community,

KubeCon is just around the corner and want to share with you our plan for KubeCon:


Here is a tweet that you can RT :)

kubeconeu2023.jpeg
Orlix
Harbor Team


CNCF Harbor Operator Dev/Community Meeting

Orlin Vasilev
 

Hi All,

 

That’s a bi-weekly reoccurring meeting for the Harbor-operator sub project

If you are interested in the harbor operator  effort feel free to join https://zoom.us/j/92469042819 and to add your topics here:

https://github.com/goharbor/harbor-operator/wiki/Harbor-Operator-Dev-Community-Meetings

 

https://github.com/goharbor/harbor-operator

 

Orlix

Harbor team!


Collect ideas for Harbor v2.9

Orlin Vasilev
 

Hello community, 

As we are almost there with release v2.8 and we have plan and roadmap for v2.9 it's time to brainstorm the ideas and requirements for the feature list for 2.9!

here is the new discussion for v2.9 https://github.com/goharbor/harbor/discussions/18396

Orlix
Harbor Community Manager!


Canceled: Harbor Community Meeting - China/Europe Time zone

Jonas Rosland
 

This invite is superseded by an invite from Orlin, so please remove from your calendar


Collective effort to create DB troubleshooting and optimisation guide for Harbor

Orlin Vasilev
 

Hello Community,

to collect input how are you troubleshooting DB issues related to Harbor and what steps did you do to optimize the work and make a more perfomant Harbor!

Thank you all for collaborating on this one, I think we will have great results!

Orlix
Harbor Community Manager


KubeCon Europe 2023 - Talks accepted or not? :) feedback please

Orlin Vasilev
 

Hi all,

I'm collecting data if some of you applied for a talk about our project and it got accepted for KubeCon Europe or not :)

If you can share that with me, I can try to help with logistics and swag and whatever else I can :)

Thank you!

Orlix
Community Manager


Harbor - We need your input :)

Orlin Vasilev
 

Hi All,

the maintainer and contributor team need to have a way to address some questions to the community, so we want to implement a label to address issues/PRs/proposals 

Please check this discussion so we can close this one and start utilizing it!

Thank you
Orlix

Harbor Community


CfP for OpenSource Summit NA 2023, Vancouver,CA is open until Feb 5th 2023!

Orlin Vasilev
 

Hi all,

Open Source Summit NA just opened CfP and it will be open until Feb 5th 2023.
If you are willing to apply I would love to help you out or even we can apply together!


Orlix
Community Manager


Re: Harbor Community feedback needed - US friendly TZ community meeting

Roger Klorese
 

If there are other folks in the Americas I would love to join them. 


On Dec 12, 2022, at 1:38 AM, Orlin Vasilev via lists.cncf.io <orlin=orlix.org@...> wrote:


!! External Email
Hello all,

This issue: https://github.com/goharbor/community/issues/189 is hanging around for quite a while!
If you are from the US and you cannot attend our China/European friendly  TZ Community meetings.

Please drop a line there so we can try to  improve the process and make it more suitable for you!

Thank you!
Orlix
Harbor Community

!! External Email: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender.