You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pages/public_cloud/containers_orchestration/managed_private_registry/managing-iam-authentication/guide.en-gb.md
OVHcloud Managed Private Registry (MPR) supports authentication through OVHcloud IAM, allowing you to manage access using centralized user identities and roles. This guide explains how to enable IAM authentication and control user access to your registry using OVHcloud IAM users and roles.
23
+
OVHcloud Managed Private Registry (MPR) supports authentication through OVHcloud IAM, allowing you to manage access using centralized user identities and roles.
24
+
25
+
This guide explains how to enable IAM authentication and control user access to your registry using OVHcloud IAM users and roles.
24
26
25
27
## Requirements
26
28
27
-
- An OVHcloud Managed Private Registry (see the [creating a private registry](/pages/public_cloud/containers_orchestration/managed_private_registry/creating-a-private-registry) guide for more information)
28
-
- An access to the Harbor UI to operate the private registry (see the [connecting to the UI](/pages/public_cloud/containers_orchestration/managed_private_registry/connecting-to-the-ui) guide for more information)
29
+
- An OVHcloud Managed Private Registry (see the [creating a private registry](/pages/public_cloud/containers_orchestration/managed_private_registry/creating-a-private-registry) guide for more information).
30
+
- An access to the Harbor UI to operate the private registry (see the [connecting to the UI](/pages/public_cloud/containers_orchestration/managed_private_registry/connecting-to-the-ui) guide for more information).
29
31
30
32
## Instructions
31
33
32
34
### Introduction to OVHcloud IAM
33
35
34
-
OVHcloud IAM (Identity and Access Management) is a centralized system that lets you manage who can access your OVHcloud services and what they are allowed to do. It provides fine-grained access control through users, groups, and roles.
36
+
OVHcloud IAM (Identity and Access Management) is a centralized system that lets you manage who can access your OVHcloud services and what they are allowed to do. It provides fine-grained access control through users, groups and roles.
35
37
36
38
When used with Managed Private Registry (MPR), OVHcloud IAM replaces Harbor’s local user database. This enables you to:
37
39
38
-
-Use SSO (Single Sign-On) with your OVHcloud credentials to access Harbor.
39
-
-Assign predefined IAM roles (admin, standard) to control access levels.
40
-
-Manage permissions at scale using IAM groups and projects.
40
+
-use SSO (Single Sign-On) with your OVHcloud credentials to access Harbor.
41
+
-assign predefined IAM roles (admin, standard) to control access levels.
42
+
-manage permissions at scale using IAM groups and projects.
41
43
42
44
By integrating IAM with your registry, you ensure consistent access control across your OVHcloud services — reducing manual management and improving security.
43
45
44
-
### Activate/Disable authentication via OVHcloud IAM
46
+
### Activate/disable authentication via OVHcloud IAM
45
47
46
48
> [!warning]
47
49
>
48
50
> When you enable OVHcloud IAM authentication on your Managed Private Registry:
49
51
>
50
-
> - All existing Harbor users will be removed.
51
-
> - Existing robot accounts remain functional.
52
-
> - New robot accounts can still be created and managed.
53
-
> - From this point on, all users access are managed through OVHcloud IAM roles and policies.
52
+
> - all existing Harbor users will be removed.
53
+
> - existing robot accounts remain functional.
54
+
> - new robot accounts can still be created and managed.
55
+
>
56
+
> From this point on, all users access are managed through OVHcloud IAM roles and policies.
54
57
>
55
58
56
59
> [!tabs]
@@ -144,17 +147,18 @@ OVHcloud IAM provides two predefined roles for managing access to your Managed P
144
147
> - After changing a user’s group and assigning the Standard role, fine-tune their permissions directly in Harbor for better control and consistency. See the different roles in Harbor [here](https://goharbor.io/docs/1.10/administration/managing-users/user-permissions-by-role/){.external}.
145
148
>
146
149
147
-
These roles are assigned through IAM policies. To create and configure a policy, navigate to the `Identity, Security & Operations`{.action} section. Then, in the left-hand menu under **Identity and Access management**, click on `Policies`{.action} and click on `Create a policy`{.action} button.
148
-
149
-
In the OVHcloud Control Panel, go to the `Identity, Security & Operations`{.action} section. In the left-hand menu, under `Identity and Access Management`, click on `Policies`{.action} and `Create a policy`{.action}.
150
+
These roles are assigned through IAM policies. To create and configure a policy, log in to the [OVHcloud Control Panel](/links/manager) and navigate to the `Identity, Security & Operations`{.action} section. Then, in the left-hand menu under **Identity and Access management**, click on `Policies`{.action} and click the `Create a policy`{.action} button.
Set permissions for MPR, in the `Product types` section, select `Public Cloud Project/Managed Registry`. In `Resources`, choose the specific MPR instance to which the policy will apply.
158
+
Set permissions for MPR:
159
+
160
+
- In the `Product types` section, select `Public Cloud Project/Managed Registry`.
161
+
- In the `Resources` section, choose the specific MPR instance to which the policy will apply.
Copy file name to clipboardExpand all lines: pages/public_cloud/containers_orchestration/managed_private_registry/managing-iam-authentication/guide.fr-fr.md
0 commit comments