Limit activities and resource consumption

[tschwaller]

As an administrator I would like to set limits on certain (allowed) activities and restrict resource consumption. This is necessary if your registry has man users and you need to protect the image scanning, storage and bandwidth capacity of your registry.

1. Limit the number of pull/push requests a user can do per day/week/month.
2. Limit the amount of GB a user can pull/push per day/week/month.
3. Limit the image size (in GB) a user can push to a registry.
4. Limit the number of image layers a user can use per image.
5. Limit the total amount of GB a user can use for all his images in a certain project/all projects.
6. Restrict the bandwidth for pull/push requests. Give certain users and projects (e.g. production) higher priority.

[wy65701436]

Thanks for there suggestions, let's just let this issue open to track these requirements.

For item #6, Harbor already has a experimental feature to filter "docker pull" request based on signature/vulnerability.

[yixingjia]

Base on project level maybe more reasonable.

[santi69]

any update on this? really waiting for a long time to set a limit on push specific to each project.

[reasonerjt]

@santi69 It's still in back-log I'd like to know what metric you wanna use to limit docker push?

[santi69]

@reasonerjt We need a max limit on each project. For example i have total 100GB of storage, and i have 3 projects A, B & C. Right now all three can use how much ever space is left in my storage. We need a cap limit on each project. Like Project A can use max of 30GB and Project B can use 40GB and Project C can use max of 30GB. This way we have a control and check on each project. When my user base on each project is higher, it is difficult to have a check on who is using how much space.

** Need quota for individual projects.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[iampeters]

@all is there a way that one can set image retention time and number of images to be retained in Harbor?

[xaleeks]

@tschwaller is this from any specific customer you've spoken to?

[cmrajiv]

@reasonerjt any update on the query limiting activities and resources consumption in registry

[github-actions[bot]]

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

[jayunit100]

We still deefinetly would like to have this. Can we remove the stale image label?

[jayunit100]

Theres a bandwidth limiting option in harbor, does that satisfy your needs ?