Enforcing Authentication for Public Projects about harbor HOT 2 CLOSED

The solution is simple and effective. Don't make projects public!

I would like to know how we can enforce authentication to ensure only authorized users can pull images from our public project.

Make the project private, that requires using authentication.

There are some options to keep project private.

• If you don't want your users to make projects public, run a cron job outside harbor to sets all project to private.
• you can also do it on the DB level (stored procedure that changes all public to private)
• Create projects for users (no self-service)
• Set up gitops workflow, where users can need to request project. The admin teams approve projects and can reject public project if needed, also enforce quota.

Options are (kind of) endless

Having said that, there is currently an RFP pending that addresses a similar concern: Enable / disable anonymous access #124

Please go ahead and vote for that, if you think it would solve your problem.

from harbor.

Allowing anonymous access to public resources is a common practice, similar to other SaaS platforms like Docker Hub. That's why we offer both public and private access levels.

If you want to restrict access to your project, just set it to private.

from harbor.