Files
awesome-kubernetes/v2-docs/registries.md

20 KiB
Raw Permalink Blame History

Docker Registries. Quay, Nexus, JFrog Artifactory, Harbor and more

!!! info "Architectural Context" Detailed reference for Docker Registries. Quay, Nexus, JFrog Artifactory, Harbor and more in the context of Engineering Pipeline.

Standard Reference

CI-CD Pipelines

Jenkins Ecosystem

Enterprise Architectures

Video Tutorials

Career Development

Market Analysis

Cloud Native Security and Artifact Management

Container Registry

Deployment Guides

  • goharbor.io: Deploy Harbor with the Quick Installation Script [DOCUMENTATION] [COMMUNITY-TOOL] [GUIDE] — Official quick-start deployment guide describing the automated script installation pipeline for Harbor. It provides developers and sandbox operators with rapid local provisioning using Docker and Docker Compose.

Harbor

  • Harbor [ADVANCED LEVEL] [DE FACTO STANDARD] [ENTERPRISE-STABLE] — CNCF-graduated enterprise-grade registry that secures cloud-native artifacts with role-based access control, vulnerability scanning, and cryptographic signing. It serves as a central hub for microservice images, offering high-throughput image replication and multi-tenant capabilities.

P2P Distribution

  • uber/kraken 6692 [ENTERPRISE-STABLE] [LEGACY] — Uber's open-source peer-to-peer (P2P) Docker registry designed for ultra-high-throughput image distribution in massive clusters. Although highly optimized, it is largely archived in favor of CNCF Dragonfly.

Enterprise Kubernetes

Red Hat OpenShift

CI-CD Pipelines (1)

Image Management

  • cloudowski.com: Openshift ImageStreams [COMMUNITY-TOOL] — A technical architectural review contrasting OpenShift ImageStreams with standard Kubernetes container registry integrations. It explains how ImageStreams abstract container images and automate rolling deployments on build mutations.

Secure Pipelines

Infrastructure Standards

Artifact Registry

Best Practices

CLI Utilities

  • (2026) nexus3-cli.readthedocs.io [DOCUMENTATION] 🌟🌟 [COMMUNITY-TOOL] — Documentation site for Python-based command-line utilities built to interface with Nexus 3 APIs. It simplifies batch tasks and permissions reporting.
  • GitHub: Nexus-CLI 294 [COMMUNITY-TOOL] — A custom command-line interface helper for managing Nexus repository clusters, written in Go. The repository is unmaintained with no commit activity in over four years.

DevOps Guides

  • Devopscube.com: Setup Nexus Kubernetes 🌟 [COMMUNITY-TOOL] — A highly practical step-by-step installation guide demonstrating how to provision Sonatype Nexus on a Kubernetes cluster. It covers configuration for Persistent Volumes, persistent claims, and ingress routing.

Enterprise Kubernetes (1)

Enterprise Platforms

  • (2026) sonatype.com/nexus-repository-oss 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — The main landing page for Sonatype Nexus Repository Manager, a universal artifact engine supporting major formats including npm, PyPI, Maven, and OCI containers. It plays a critical role in secure software supply chains.
  • (2026) Nexus Repository Manager (NXRM) 3 🌟 [ADVANCED LEVEL] [DOCUMENTATION] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Official comprehensive documentation for Sonatype Nexus Repository Manager 3, providing deployment, backup, migration, and clustering guidelines for enterprise system administrators.
  • (2022) jfrog.com: What Artifactory as your kubernetes docker registry means to you 🌟🌟🌟 [COMMUNITY-TOOL] — An exploration of JFrog Artifactory's role as a local Kubernetes Docker registry proxy, showing how it minimizes deployment latency and manages external registry rate limits.
  • JFrog Artifactory: Your Kubernetes Registry [COMMUNITY-TOOL] — A deep technical article showing how JFrog Artifactory works as a high-density Kubernetes-integrated OCI registry with caching and security protections.

Infrastructure as Code

  • github.com/samrocketman/nexus3-config-as-code 62 [ADVANCED LEVEL] [LEGACY] — A declarative configuration-as-code utility for bootstrapping Nexus 3 configurations, utilizing Groovy scripting. Unmaintained for over four years and marked as legacy.

Legacy Resources

  • github.com/cinhtau/sonatype-nexus-waffle 6 [ADVANCED LEVEL] [COMMUNITY-TOOL] — An archive project that integrates Nexus authentication with Active Directory. It is inactive and obsolete, retained purely for vintage reference purposes.

Open Source Initiatives

  • Sonatype Nexus Community 🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] — The master community hub containing third-party integrations, developer plugins, and configuration scripts targeting the Sonatype Nexus software ecosystem.

Container Registry (1)

Artifact Registry (1)

Configuration Guides

Enterprise Platforms (1)

  • (2022) Quay 3.1 Certified Operator is not available in Openshift and must be purchased 🌟 [COMMUNITY-TOOL] — An official overview of Red Hat Quay subscription models, outlining security policies, vulnerability scanning integrations, and platform scaling mechanisms for multi-cluster enterprise deployments.
  • Quay.io [ADVANCED LEVEL] [ENTERPRISE-STABLE] — A highly secure, enterprise-ready container registry platform providing advanced geo-replication, vulnerability scanning via Clair, and multi-tenant authentication patterns. It integrates natively with Red Hat ecosystem tooling.
  • JFrog Container Registry [COMMUNITY-TOOL] — Enterprise landing page for JFrog's Container Registry, showing support for Helm, Docker, and OCI specifications with high-availability clustering and build-of-materials reporting.

Kubernetes Operators

  • (2024) Quay Community Edition operator 143 [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] — The official Kubernetes Operator for deploying and managing the life cycle of Project Quay registries. It automates storage setup, database migrations, and SSL termination within OpenShift and OKD clusters.

Legacy Resources (1)

  • (2026) Test an insecure registry 🌟 [DOCUMENTATION] 🌟 [COMMUNITY-TOOL] — Retired Docker documentation dealing with configurations of insecure, unencrypted private registries. Preserved for diagnosing vintage local developer configurations.

Maintenance Scripts

Open Source Initiatives (1)

  • Red Hat Introduces open source Project Quay container registry [COMMUNITY-TOOL] — A historical press release from Red Hat explaining the architectural transition and open-sourcing of Project Quay, detailing its integration into standard enterprise container management stacks.
  • github.com/quay [ADVANCED LEVEL] [ENTERPRISE-STABLE] — The master GitHub organization for Project Quay, housing the enterprise registry engine, the Clair vulnerability scanner, the setup operators, and auxiliary storage backend connectors.

Release Notes

  • Quay 3.0 released in May 2019 [COMMUNITY-TOOL] — Official release documentation for Red Hat Quay 3.0. It highlights architectural additions including Windows Container support, a revamped UI, and improved multi-tenant namespace management.

Infrastructure as Code and Automation

Configuration Management

Ansible

  • nicholasamorim/ansible-role-harbor 26 [COMMUNITY-TOOL] [LEGACY] — An Ansible role dedicated to provisioning and configuring Harbor. Due to limited recent maintenance, it serves primarily as a reference architecture for legacy automation projects.
  • mramanathan/ansible-harbor [COMMUNITY-TOOL] [LEGACY] — Legacy Ansible playbook for Harbor deployment orchestration. It lacks modern feature updates and is deprecated in favor of Kubernetes-native Helm-based deployments.

VMware

  • galaxy.ansible.com/mkgin/vmware-harbor [COMMUNITY-TOOL] [LEGACY] — Ansible Galaxy role designed to install Harbor registries on VMware-based virtual infrastructure. It remains a historical reference but has been surpassed by containerized approaches.

Security

DevSecOps

Secrets Scanning


💡 Explore Related: Jenkins | CI/CD | Gitops