You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This document describes the reversibility policy of the Managed OCI artifact Registry product covering OVHcloud service: Managed Private Registry
8
+
This document describes the reversibility policy of the Managed OCI artifact Registry product covering the following OVHcloud service: Managed Private Registry
9
9
10
10
This policy aims to implement the general reversibility principles and our compliance with the SWIPO IAAS Code of Conduct for cloud providers.
11
11
@@ -17,54 +17,45 @@ The product features are divided into three categories:
17
17
-**OVHcloud implementations** that require adaptation to a new migration environment.
18
18
-**Specific features** that cannot be guaranteed for migration as they are related to the OVHcloud environment or involve custom developments.
19
19
20
-
21
-
22
-
## Main features
20
+
## #Main features
23
21
24
22
| Functionality| Description | Formats | Migration model | Documentation available |
25
23
| --- | --- | --- | --- | --- |
26
-
|**OCI API and compatibility**| Native OCI (Open Container Initiative) support for artifacts, images, Helm charts, Cosign signatures, and more. | OCI, Helm, Cosign (signatures), JSON |**Inbound** : Direct push of artifacts via standard tools (docker, helm, oras, cosign, etc.) or OCI API.<br>**Outbound** : Pull/export of artifacts via the same tools or API to any other OCI/Harbor/Artifact Registry compatible registry. |[Migrate Helm Chart from Chartmuseum to OCI](/pages/public_cloud/containers_orchestration/managed_private_registry/migrate-helm-charts-from-chartmuseum-to-oci)|
27
-
|**Import/Export Artifacts**| Upload and download artifacts (push/pull) via CLI/API standard Harbor/OCI | OCI, Helm, JSON |**Inbound**:Import via docker push, helm push, oras push, etc.<br>**Outbound** : Export via docker pull, helm pull, oras pull, then push to the target. |[Artifact Import/Export](/pages/public_cloud/containers_orchestration/managed_private_registry/migrate-helm-charts-from-chartmuseum-to-oci)|
28
-
|**Signature and verification Cosign**| Signature and verification of artifacts via Cosign (Sigstore), Harbor v2.5+ native support | Cosign (OCI signature) |**Inbound** : Import of Cosign signed artifacts.<br>**Outbound** : Export of Cosign artifacts and their signatures, reimport possible on any Cosign/OCI compatible registry. |[ Sign OCI artifacts with Cosign on OVHcloud Managed Private Registry](/pages/public_cloud/containers_orchestration/managed_private_registry/sign-artifacts-with-cosign)|
29
-
|**Replication Harbor**| Automatic synchronization/replication between Harbor/OCI registries (push/pull or bidirectional) | OCI, Helm, JSON |**Inbound**: Configuring replication from a source registry (Harbor/OCI) to OVHcloud.<br>**Outbound**: Configuring replication to another Harbor/OCI-compatible registry. |[Replication Configuration](goharbour.io/docs/2.0.0/administration/configuration-replication/)|
30
-
24
+
|**OCI API and compatibility**| Native OCI (Open Container Initiative) support for artifacts, images, Helm charts, Cosign signatures, and more. | OCI, Helm, Cosign (signatures), JSON |**Inbound**: Direct push of artifacts via standard tools (docker, helm, oras, cosign, etc.) or OCI API.<br>**Outbound**: Pull/export of artifacts via the same tools or API to any other OCI/Harbor/Artifact Registry compatible registry. |[Migrate Helm Chart from Chartmuseum to OCI](/pages/public_cloud/containers_orchestration/managed_private_registry/migrate-helm-charts-from-chartmuseum-to-oci)|
25
+
|**Import/Export Artifacts**| Upload and download artifacts (push/pull) via CLI/API standard Harbor/OCI | OCI, Helm, JSON |**Inbound**:Import via docker push, helm push, oras push, etc.<br>**Outbound**: Export via docker pull, helm pull, oras pull, then push to the target. |[Artifact Import/Export](/pages/public_cloud/containers_orchestration/managed_private_registry/migrate-helm-charts-from-chartmuseum-to-oci)|
26
+
|**Signature and verification Cosign**| Signature and verification of artifacts via Cosign (Sigstore), Harbor v2.5+ native support | Cosign (OCI signature) |**Inbound**: Import of Cosign signed artifacts.<br>**Outbound**: Export of Cosign artifacts and their signatures, reimport possible on any Cosign/OCI compatible registry. |[Sign OCI artifacts with Cosign on OVHcloud Managed Private Registry](/pages/public_cloud/containers_orchestration/managed_private_registry/sign-artifacts-with-cosign)|
27
+
|**Replication Harbor**| Automatic synchronization/replication between Harbor/OCI registries (push/pull or bidirectional) | OCI, Helm, JSON |**Inbound**: Configuring replication from a source registry (Harbor/OCI) to OVHcloud.<br>**Outbound**: Configuring replication to another Harbor/OCI-compatible registry. |[Replication Configuration](https://goharbor.io/docs/2.0.0/administration/configuring-replication/)|
31
28
32
-
## OVHcloud implementation
29
+
###OVHcloud implementation
33
30
34
31
| Functionality| Description | Formats | Migration model | Documentation available |
35
32
| --- | --- | --- | --- | --- |
36
33
|**RBAC and rights management**| Manage access rights by project, user, robot account, RBAC Harbor | JSON (policies), interne Harbor |**Incoming**: Permissions are adjusted manually during import.<br>**Outgoing**: Artifacts are exported, then permissions are reconfigured on the target (RBAC format not always compatible between solutions). |[Managing users and projects](/pages/public_cloud/containers_orchestration/managed_private_registry/managing-users-and-projects)|
37
-
|**Audit logs and logs**| Automatic access logging and operations (Harbor/OVHcloud logs) | JSON, internal logs |**Incoming**: Not applicable for import.<br>**Outgoing**: Manually export logs if required, adaptation required depending on the target (format/non-standardized logs).|[Access and Search Project Logs](https://goharbour.io/docs/2.3.0/working-with-projects/project-configuration/access-project-logs/)|
34
+
|**Audit logs and logs**| Automatic access logging and operations (Harbor/OVHcloud logs) | JSON, internal logs |**Incoming**: Not applicable for import.<br>**Outgoing**: Manually export logs if required, adaptation required depending on the target (format/non-standardized logs).|[Access and Search Project Logs](https://goharbor.io/docs/2.3.0/working-with-projects/project-configuration/access-project-logs/)|
38
35
|**CI/CD Automation**| Integration with CI/CD pipelines via Harbor/OCI API, robot tokens, OIDC | JSON, YAML (pipelines) |**Incoming**: Adapting scripts/pipelines to point to the OVHcloud registry.<br>**Outgoing**: Reconfiguring pipelines to point to the new target, potential tokens adaptation and permissions.|[Harbor API](https://api.harbor.gg/docs/index.html)|
39
36
|**Vulnerability Scans**| Automatic image analysis via an integrated Harbor scanner (Trivy, Clair, etc.) | JSON CSV Reports |**Inbound**: Not applicable for import.<br>**Outbound**: Reports can be exported, but the target may need to be adapted if it has another scanner.|[Clair project](https://clairproject.org/)|
40
37
41
-
42
-
## Specific features
38
+
### Specific features
43
39
44
40
| Functionality| Description | Formats | Migration model | Documentation available |
45
41
| --- | --- | --- | --- | --- |
46
-
|**Managed via the OVHcloud Control Panel**| OVHcloud-specific graphical interface and API for service management | N/A |**Inbound**: N/A<br>**Outbound**: Scripts/API to rewrite for the target, manual management required. |[OVHcloud API ](https://eu.api.ovh.com/console/?section=%2FallDom&branch=v1)|
42
+
|**Managed via the OVHcloud Control Panel**| OVHcloud-specific graphical interface and API for service management | N/A |**Inbound**: N/A<br>**Outbound**: Scripts/API to rewrite for the target, manual management required. |[OVHcloud API ](https://api.ovh.com/console/?section=%2FallDom&branch=v1)|
47
43
|**Infrastructure as Code**| Automated deployment via Terraform modules specific to OVHcloud | N/A |**Inbound:** Scripts must be adapted for other providers. <br> **Outbound:** Terraform configurations need to be rewritten. |[Terraform](https://registry.terraform.io/providers/ovh/ovh/latest/docs)|
48
44
49
-
50
-
51
45
## List of architectures
52
46
53
47
The OVHcloud Managed Private Registry service (based on Harbor) supports a multi-project, multi-namespace, multi-user architecture with logical isolation. It enables automatic replication between registries (Harbor/OCI), fine-grained rights management (RBAC), OIDC authentication, artifact signing and verification (Cosign), vulnerability scanning, and CI/CD integration via API or robot tokens. The service is highly available and can be integrated into the OVHcloud vRack private network for secure usage.
54
48
55
49
## Partner Services
56
50
57
-
OVHcloud partners are listed under the keyword **“Migrate to the cloud”** in the Dedicated Partner Directory.
58
-
59
-
OVHcloud also offers a dedicated service: [**OVHcloud Professional Services**](https://www.ovhcloud.com/en-gb/professional-services/).
60
-
51
+
OVHcloud partners are listed under the keyword **Migrate to the cloud** in the [Dedicated Partner Directory](/links/partner).
61
52
53
+
OVHcloud also offers a dedicated service: [OVHcloud Professional Services](/links/professional-services).
62
54
63
55
## Cost and fees
64
56
65
-
Billing based on a pay-per-use basis, with no commitment. No specific cancelation fees apply: deleting the service will stop the billing immediately. Any associated OVHcloud credits cannot be transferred. It is the customer’s responsibility to export their artifacts before deletion, as deleting them is irreversible.
66
-
57
+
Billing is based on a pay-per-use basis, with no commitment. No specific cancellation fees apply: deleting the service will stop the billing immediately. Any associated OVHcloud credits cannot be transferred. It is the customer’s responsibility to export their artifacts before deletion, as deleting them is irreversible.
67
58
68
59
## Data Retention after termination of the contract
69
60
70
-
After deletion of the service or termination of the contract, OVHcloud permanently deletes all artifacts, images, signatures and metadata stored in the registry. Logs and access histories are also deleted. It is therefore imperative to export all necessary data before deletion, as no restoration is possible after the cancelation.
61
+
After deletion of the service or termination of the contract, OVHcloud permanently deletes all artifacts, images, signatures and metadata stored in the registry. Logs and access histories are also deleted. It is therefore imperative to export all necessary data before deletion, as no restoration is possible after the cancellation.
0 commit comments