[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-09-04 (世界標準時間)。"],[[["\u003cp\u003eGoogle Distributed Cloud (GDC) air-gapped Managed Harbor Service (MHS) is a fully managed service for storing and managing container images in isolated environments.\u003c/p\u003e\n"],["\u003cp\u003eHarbor, an open-source registry, ensures secure artifact management through policies, role-based access control, vulnerability scanning, and image signing.\u003c/p\u003e\n"],["\u003cp\u003eGDC MHS offers control-plane operations for creating and managing Harbor instances, as well as data-plane operations for pushing and pulling container images.\u003c/p\u003e\n"],["\u003cp\u003eHarbor instances on GDC are automatically provisioned, managed, integrated with GDC's IAM and observability systems, and can be upgraded to the latest stable version.\u003c/p\u003e\n"]]],[],null,["# Managed Harbor Service overview\n\nGoogle Distributed Cloud (GDC) air-gapped Managed Harbor Service (MHS) is a fully managed service that lets you store and manage container images, even in air-gapped environments completely isolated from the internet or other networks.\nHarbor is an open source registry that secures artifacts with policies and\nrole-based access control, ensuring images are scanned, free from\nvulnerabilities, and images are signed as trusted.\n\nGDC MHS provides control-plane operations, such as creating and\ndeleting Harbor registry instances. It enables GDC MHS\ndata-plane operations like pushing and pulling container images. Pushing your\ncontainer images to a container registry solution like Harbor provides a\ncentralized, secure, scalable, and efficient way to store, manage, and deploy\nyour Docker images.\n\nHarbor is a Cloud Native Computing Foundation (CNCF) graduated open source\nproject that provides a built-in cloud container registry solution for\nKubernetes and Docker. With managed service integration, customers can deploy\ntheir own Harbor instance to store and manage their artifacts on GDC MHS\noffers the following features:\n\n- Harbor instances are automatically provisioned and managed by GDC.\n- Harbor is integrated with GDC's IAM and observability systems.\n- Harbor instances can be upgraded to the newer stable version.\n- Harbor is enhanced to meet GDC's compliance and quality requirements.\n\nPerformance\n-----------\n\nMHS has been tested and verified to support the limits specified on this page. The actual performance limits might be higher.\n\nMHS supports the following performance limits:\n\n- Up to five Harbor instances in an organization. Only one instance is permitted per user project.\n- Harbor has a limit of 128 GB per layer. Don't try to push layers larger than 128 GB.\n- Up to 1 TB in total storage. This storage limit might vary depending on the total storage available in object storage.\n- Handle at least 30 concurrent requests at a given time for various artifact sizes, from 1 KB to 1 GB.\n\nGarbage collection\n------------------\n\nWhen you use MHS to add images to and delete images from the registry, unused data can build up over time. To avoid straining storage resources, MHS automatically performs garbage collection every 12 hours. You don't have to configure garbage collection manually.\n\nWhat's next\n-----------\n\nTo enable MHS, you must [create a Harbor instance in your project](/distributed-cloud/hosted/docs/latest/gdch/platform-application/pa-ao-operations/create-harbor-instances)."]]
