Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Harbor replication to ECR in cross-account not referencing remote account in CreateRepository and DescribeRepository functions #21635

Open
chriswvu opened this issue Feb 13, 2025 · 2 comments
Labels
help wanted The issues that is valid but needs help from community replication/adapters related to replication adapters

Comments

@chriswvu
Copy link

During replication to AWS ECR in a different account from where Harbor is installed the checkRepostory function and the createRepository function are checking for existence of repository and creating repository in the account where harbor is running.

Looks like it is possible to pass in the RegistryId as input to the DescribeRepositories and CreateRepository aws sdk call.

@wy65701436 wy65701436 added the replication/adapters related to replication adapters label Feb 17, 2025
@reasonerjt reasonerjt added the help wanted The issues that is valid but needs help from community label Feb 17, 2025
@reasonerjt
Copy link
Contributor

reasonerjt commented Feb 17, 2025

I'm not maintaining the adapter for ECR.

During replication to AWS ECR in a different account from where Harbor is installed

Could you explain a little bit here? Why does it matter where Harbor is installed?
Normally in Harbor you need to provide the AK/SK to ECR endpoint for replication. Therefore, if you provide the correct AK/SK and Harbor can access the endpoint the replication should work.

@chriswvu
Copy link
Author

Thanks Daniel

Do you know who is maintaining the adapter for ECR ?

We're not using AK/SK as we prefer to use IAM roles on the EC2 instance. In order for cross account to work I believe we need the Create and Describe functions to pass in the RegistryId.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted The issues that is valid but needs help from community replication/adapters related to replication adapters
Projects
None yet
Development

No branches or pull requests

3 participants