Skip to content

How to do replication with Robot Account

Jump to bottom
Wang Yan edited this page Nov 9, 2021 · 2 revisions

It requires Harbor v2.4.0+, and only system level robot can do replication between Harbor instances.

Let's assume that you have two Harbor instances, Harbor A(source) and Harbor B(target).

  • Pull mode(A pull from B):

The robot account that created on Harbor B needs at least these three permissions of the configured namespace:

  1. Pull Repository
  2. List Artifact
  3. List Repository

The Resource in the replication rule on Harbor A must be set to image or artifact. Since it doesn't support robot to replication charts in the chartmuseum.

  • Push mode(A push to B):

The robot account that created on Harbor B needs at least the two permissions.

  1. Push Repository
  2. Pull Repository

The Resource in the replication rule on Harbor A must be set to image or artifact. Since it doesn't support robot to replication charts in the chartmuseum.

The destination namespace in the replication rule on Harbor A:

  1. If it is an non-exist namespace, the permission of robot on Harbor B must be set to Cover all projects.
  2. If it is an existing namespace, the robot on Harbor B must at least have the access scope of the existing namespace.
Clone this wiki locally