Content:

In this workshop, you will learn how to implement Harbor as a central, secure container registry in your infrastructure and establish it as a trusted building block for your software supply chain. The course addresses three target groups: security leaders (CISOs), operations teams, and developers – with hands-on content for each perspective.
Thanks to hands-on exercises and real-world scenarios, you will develop the ability to operate Harbor as a stable, secure, and scalable registry service. You will learn modern automation approaches with Infrastructure as Code and GitOps and discover how Harbor serves as a central hub for container images, Helm charts, AI/ML models, and other OCI artifacts.

Day 1 – Installation, Security & Governance:
– Welcome, Setup & Lab Environment
– Harbor Fundamentals:
... - Harbor architecture and components
... - Installation and basic configuration
... - Harbor as central hub for all organizational images
... - High availability and scaling
– Identity & Access Management:
... - OIDC integration (Keycloak, Azure AD, Okta, Google)
... - LDAP/Active Directory integration
... - User and role management (RBAC)
... - Project-based access control and multi-tenancy
– Security & Compliance (CISO Perspective):
... - Vulnerability scanning with Trivy
... - SBOM generation and export
... - Audit trails and compliance reporting
... - Policy-based image control
... - SSL/TLS configuration and certificate management
– Operational Control (Ops Perspective):
... - Quotas and resource control
... - Retention policies and tag management
... - Garbage collection and storage management
... - Proxy cache: Centrally cache external registries

Day 2 – Automation, Distribution & Integration:
– Replication & Distribution:
... - Bidirectional image replication (push & pull)
... - Replication to/from Docker Hub, ECR, GCR, ACR, Quay
... - Software distribution to customers and partners
... - Edge and IoT distribution scenarios
– Infrastructure as Code & GitOps:
... - Harbor provisioning with Terraform
... - Pulumi and Crossplane for Harbor
... - GitOps workflows for registry configuration
... - Robot accounts for automated pipelines
... - RESTful API and CLI for automation
– OCI Artifacts & Beyond Images:
... - Store and distribute Helm charts in Harbor
... - AI/ML models as OCI artifacts
... - Cosign: Image signing and verification
... - Supply chain automation workflows
– CI/CD & Kubernetes Integration:
... - CI/CD pipeline integration (GitHub Actions, GitLab CI, Jenkins)
... - Kubernetes image pull secrets
... - Webhook integration for automation
... - Performance monitoring and troubleshooting
... - Best practices for production environments

Disclaimer: The actual course content may vary from the above, depending on the trainer, implementation, duration and constellation of participants.

Whether we call it training, course, workshop or seminar, we want to pick up participants at their point and equip them with the necessary practical knowledge so that they can apply the technology directly after the training and deepen it independently.