All Products
Search
Document Center

Container Service for Kubernetes:Synchronize images from a self-managed Harbor project to Container Registry Enterprise Edition

Last Updated:Feb 06, 2024

Container Registry Enterprise Edition supports fast image migration and custom domain names. You can migrate data and images from self-managed Harbor projects to Container Registry Enterprise Edition and host them with cloud services and technologies provided by Alibaba Cloud. This can greatly reduce your O&M work, simplify the integration with Container Service for Kubernetes (ACK), and make application delivery much easier.

Background information

Container Registry Enterprise Edition provides an enterprise-class secure service for managing container images and Helm charts. It allows you to distribute images to thousands of nodes concurrently and synchronize images across regions on a global scale. This service also allows you to create cloud-native application delivery chains to automatically deliver images globally upon source code changes in multiple scenarios. This service is suitable for enterprise customers that have high security requirements, deploy services in multiple regions, and use clusters that consist of a large number of nodes.

Step 1: Migrate backend data of the Harbor instance

  • If your Harbor instance uses Apsara File Storage NAS as the backend storage, you must migrate data from NAS to an Object Storage Service (OSS) bucket. For more information, see Migrate data from NAS to OSS.

  • If your Harbor instance uses a data center as the backend storage, you must use the Data Online Migration service of OSS to migrate data from the data center to an OSS bucket. For more information, see Migrate data from a local IDC to OSS.

  • Skip this step if the backend data of the Harbor instance is stored in OSS.

Step 2: Select an OSS bucket

When you create a Container Registry Enterprise Edition instance, you can select an existing OSS bucket as the backend storage of the instance.

  1. Attach a RAM role to the account and grant the RAM role the permission to manage the OSS bucket. For more information, see Grant permissions to a RAM role that is used to access custom OSS buckets.

  2. Create a Container Registry Enterprise Edition instance.

    When you create a Container Registry Enterprise Edition instance, set Instance Storage to Custom and select a bucket. For more information, see Create a Container Registry Enterprise Edition instance.

Step 3: Import images

  1. Log on to the Container Registry console.

  2. In the top navigation bar, select a region.

  3. In the left-side navigation pane, click Instances.

  4. On the Instances page, click the Enterprise Edition instance that you want to manage.

  5. On the management page of the Container Registry Enterprise Edition instance, choose Instances > Image Import in the left-side navigation pane,

  6. On the Image Import page, click Trigger Task.

  7. In the Tips dialog box, select Confirm to import and click Confirm.

    Note

    On the Image Import page, find the created task and click Details in the Actions column to view the progress.

Step 4: Bind a custom domain name to the instance

You can bind a custom domain name that has a Secure Sockets Layer (SSL) certificate to a Container Registry Enterprise Edition instance. After you perform this operation, you can use the custom domain name to access the instance over HTTPS.

We recommend that you set the custom domain name of the Container Registry Enterprise Edition instance to the domain name of the self-managed Harbor instance. For more information, see Use a custom domain name to access a Container Registry Enterprise Edition instance.