Skip to content

Commit c140847

Browse files
committed
OCI Registry proofreading + Orchestration fix
1 parent b58094d commit c140847

File tree

4 files changed

+38
-56
lines changed

4 files changed

+38
-56
lines changed

pages/account_and_service_management/reversibility/12-reversibility-orchestration/guide.en-gb.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ The managed orchestration service runs in a single region from among several reg
5656

5757
OVHcloud partners are listed under the keyword **“Migrate to the cloud”** in the [Dedicated Partner directory](/links/partner).
5858

59-
OVHcloud also offers a dedicated service: [**OVHcloud Professional Services**](/links/professional-services).
59+
OVHcloud also offers a dedicated service: [OVHcloud Professional Services](/links/professional-services).
6060

6161
## Cost and fees
6262

pages/account_and_service_management/reversibility/12-reversibility-orchestration/guide.fr-fr.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ Le service Managed Orchestration tourne sur une seule région parmi plusieurs r
5656

5757
Les partenaires OVHcloud sont répertoriés sous le mot-clé **« Migration vers le cloud »** dans [l'annuaire des partenaires dédiés](/links/partner).
5858

59-
OVHcloud propose également un service dédié : [**OVHcloud Professional Services**](/links/professional-services).
59+
OVHcloud propose également un service dédié : [OVHcloud Professional Services](/links/professional-services).
6060

6161
## Coût et frais
6262

Lines changed: 15 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
22
title: Managed OCI artifact Registry Product Reversibility Policy
3-
updated: 2025-06-10
3+
updated: 2025-06-16
44
---
55

66
## Objective
77

8-
This document describes the reversibility policy of the Managed OCI artifact Registry product covering OVHcloud service : Managed Private Registry
8+
This document describes the reversibility policy of the Managed OCI artifact Registry product covering the following OVHcloud service: Managed Private Registry
99

1010
This policy aims to implement the general reversibility principles and our compliance with the SWIPO IAAS Code of Conduct for cloud providers.
1111

@@ -17,54 +17,45 @@ The product features are divided into three categories:
1717
- **OVHcloud implementations** that require adaptation to a new migration environment.
1818
- **Specific features** that cannot be guaranteed for migration as they are related to the OVHcloud environment or involve custom developments.
1919

20-
21-
22-
## Main features
20+
## #Main features
2321

2422
| Functionality| Description | Formats | Migration model | Documentation available |
2523
| --- | --- | --- | --- | --- |
26-
| **OCI API and compatibility** | Native OCI (Open Container Initiative) support for artifacts, images, Helm charts, Cosign signatures, and more. | OCI, Helm, Cosign (signatures), JSON | **Inbound** : Direct push of artifacts via standard tools (docker, helm, oras, cosign, etc.) or OCI API.<br>**Outbound** : Pull/export of artifacts via the same tools or API to any other OCI/Harbor/Artifact Registry compatible registry. | [Migrate Helm Chart from Chartmuseum to OCI](/pages/public_cloud/containers_orchestration/managed_private_registry/migrate-helm-charts-from-chartmuseum-to-oci)|
27-
| **Import/Export Artifacts** | Upload and download artifacts (push/pull) via CLI/API standard Harbor/OCI | OCI, Helm, JSON | **Inbound**:Import via docker push, helm push, oras push, etc.<br>**Outbound** : Export via docker pull, helm pull, oras pull, then push to the target. | [Artifact Import/Export](/pages/public_cloud/containers_orchestration/managed_private_registry/migrate-helm-charts-from-chartmuseum-to-oci) |
28-
| **Signature and verification Cosign** | Signature and verification of artifacts via Cosign (Sigstore), Harbor v2.5+ native support | Cosign (OCI signature) | **Inbound** : Import of Cosign signed artifacts.<br>**Outbound** : Export of Cosign artifacts and their signatures, reimport possible on any Cosign/OCI compatible registry. | [ Sign OCI artifacts with Cosign on OVHcloud Managed Private Registry](/pages/public_cloud/containers_orchestration/managed_private_registry/sign-artifacts-with-cosign) |
29-
| **Replication Harbor** | Automatic synchronization/replication between Harbor/OCI registries (push/pull or bidirectional) | OCI, Helm, JSON | **Inbound**: Configuring replication from a source registry (Harbor/OCI) to OVHcloud.<br>**Outbound**: Configuring replication to another Harbor/OCI-compatible registry. | [Replication Configuration](goharbour.io/docs/2.0.0/administration/configuration-replication/)|
30-
24+
| **OCI API and compatibility** | Native OCI (Open Container Initiative) support for artifacts, images, Helm charts, Cosign signatures, and more. | OCI, Helm, Cosign (signatures), JSON | **Inbound**: Direct push of artifacts via standard tools (docker, helm, oras, cosign, etc.) or OCI API.<br>**Outbound**: Pull/export of artifacts via the same tools or API to any other OCI/Harbor/Artifact Registry compatible registry. | [Migrate Helm Chart from Chartmuseum to OCI](/pages/public_cloud/containers_orchestration/managed_private_registry/migrate-helm-charts-from-chartmuseum-to-oci)|
25+
| **Import/Export Artifacts** | Upload and download artifacts (push/pull) via CLI/API standard Harbor/OCI | OCI, Helm, JSON | **Inbound**:Import via docker push, helm push, oras push, etc.<br>**Outbound**: Export via docker pull, helm pull, oras pull, then push to the target. | [Artifact Import/Export](/pages/public_cloud/containers_orchestration/managed_private_registry/migrate-helm-charts-from-chartmuseum-to-oci) |
26+
| **Signature and verification Cosign** | Signature and verification of artifacts via Cosign (Sigstore), Harbor v2.5+ native support | Cosign (OCI signature) | **Inbound**: Import of Cosign signed artifacts.<br>**Outbound**: Export of Cosign artifacts and their signatures, reimport possible on any Cosign/OCI compatible registry. | [Sign OCI artifacts with Cosign on OVHcloud Managed Private Registry](/pages/public_cloud/containers_orchestration/managed_private_registry/sign-artifacts-with-cosign) |
27+
| **Replication Harbor** | Automatic synchronization/replication between Harbor/OCI registries (push/pull or bidirectional) | OCI, Helm, JSON | **Inbound**: Configuring replication from a source registry (Harbor/OCI) to OVHcloud.<br>**Outbound**: Configuring replication to another Harbor/OCI-compatible registry. | [Replication Configuration](https://goharbor.io/docs/2.0.0/administration/configuring-replication/)|
3128

32-
## OVHcloud implementation
29+
### OVHcloud implementation
3330

3431
| Functionality| Description | Formats | Migration model | Documentation available |
3532
| --- | --- | --- | --- | --- |
3633
| **RBAC and rights management** | Manage access rights by project, user, robot account, RBAC Harbor | JSON (policies), interne Harbor | **Incoming**: Permissions are adjusted manually during import.<br>**Outgoing**: Artifacts are exported, then permissions are reconfigured on the target (RBAC format not always compatible between solutions). |[Managing users and projects](/pages/public_cloud/containers_orchestration/managed_private_registry/managing-users-and-projects)|
37-
| **Audit logs and logs** | Automatic access logging and operations (Harbor/OVHcloud logs) | JSON, internal logs | **Incoming**: Not applicable for import.<br>**Outgoing**: Manually export logs if required, adaptation required depending on the target (format/non-standardized logs).|[Access and Search Project Logs](https://goharbour.io/docs/2.3.0/working-with-projects/project-configuration/access-project-logs/) |
34+
| **Audit logs and logs** | Automatic access logging and operations (Harbor/OVHcloud logs) | JSON, internal logs | **Incoming**: Not applicable for import.<br>**Outgoing**: Manually export logs if required, adaptation required depending on the target (format/non-standardized logs).|[Access and Search Project Logs](https://goharbor.io/docs/2.3.0/working-with-projects/project-configuration/access-project-logs/) |
3835
| **CI/CD Automation** | Integration with CI/CD pipelines via Harbor/OCI API, robot tokens, OIDC | JSON, YAML (pipelines) | **Incoming**: Adapting scripts/pipelines to point to the OVHcloud registry.<br>**Outgoing**: Reconfiguring pipelines to point to the new target, potential tokens adaptation and permissions.| [Harbor API](https://api.harbor.gg/docs/index.html)|
3936
| **Vulnerability Scans** | Automatic image analysis via an integrated Harbor scanner (Trivy, Clair, etc.) | JSON CSV Reports | **Inbound**: Not applicable for import.<br>**Outbound**: Reports can be exported, but the target may need to be adapted if it has another scanner.|[Clair project](https://clairproject.org/)|
4037

41-
42-
## Specific features
38+
### Specific features
4339

4440
| Functionality| Description | Formats | Migration model | Documentation available |
4541
| --- | --- | --- | --- | --- |
46-
| **Managed via the OVHcloud Control Panel** | OVHcloud-specific graphical interface and API for service management | N/A | **Inbound**: N/A<br>**Outbound**: Scripts/API to rewrite for the target, manual management required. | [OVHcloud API ](https://eu.api.ovh.com/console/?section=%2FallDom&branch=v1)|
42+
| **Managed via the OVHcloud Control Panel** | OVHcloud-specific graphical interface and API for service management | N/A | **Inbound**: N/A<br>**Outbound**: Scripts/API to rewrite for the target, manual management required. | [OVHcloud API ](https://api.ovh.com/console/?section=%2FallDom&branch=v1)|
4743
| **Infrastructure as Code** | Automated deployment via Terraform modules specific to OVHcloud | N/A | **Inbound:** Scripts must be adapted for other providers. <br> **Outbound:** Terraform configurations need to be rewritten. | [Terraform](https://registry.terraform.io/providers/ovh/ovh/latest/docs) |
4844

49-
50-
5145
## List of architectures
5246

5347
The OVHcloud Managed Private Registry service (based on Harbor) supports a multi-project, multi-namespace, multi-user architecture with logical isolation. It enables automatic replication between registries (Harbor/OCI), fine-grained rights management (RBAC), OIDC authentication, artifact signing and verification (Cosign), vulnerability scanning, and CI/CD integration via API or robot tokens. The service is highly available and can be integrated into the OVHcloud vRack private network for secure usage.
5448

5549
## Partner Services
5650

57-
OVHcloud partners are listed under the keyword **“Migrate to the cloud”** in the Dedicated Partner Directory.
58-
59-
OVHcloud also offers a dedicated service: [**OVHcloud Professional Services**](https://www.ovhcloud.com/en-gb/professional-services/).
60-
51+
OVHcloud partners are listed under the keyword **Migrate to the cloud** in the [Dedicated Partner Directory](/links/partner).
6152

53+
OVHcloud also offers a dedicated service: [OVHcloud Professional Services](/links/professional-services).
6254

6355
## Cost and fees
6456

65-
Billing based on a pay-per-use basis, with no commitment. No specific cancelation fees apply: deleting the service will stop the billing immediately. Any associated OVHcloud credits cannot be transferred. It is the customer’s responsibility to export their artifacts before deletion, as deleting them is irreversible.
66-
57+
Billing is based on a pay-per-use basis, with no commitment. No specific cancellation fees apply: deleting the service will stop the billing immediately. Any associated OVHcloud credits cannot be transferred. It is the customer’s responsibility to export their artifacts before deletion, as deleting them is irreversible.
6758

6859
## Data Retention after termination of the contract
6960

70-
After deletion of the service or termination of the contract, OVHcloud permanently deletes all artifacts, images, signatures and metadata stored in the registry. Logs and access histories are also deleted. It is therefore imperative to export all necessary data before deletion, as no restoration is possible after the cancelation.
61+
After deletion of the service or termination of the contract, OVHcloud permanently deletes all artifacts, images, signatures and metadata stored in the registry. Logs and access histories are also deleted. It is therefore imperative to export all necessary data before deletion, as no restoration is possible after the cancellation.

0 commit comments

Comments
 (0)