Harbor for Beginners, Part 2: Create Your First Project

Make your own project in Harbor so you can actually start using it. Public versus private in plain terms, the thirty-second create flow, and a tour of the admin tabs you get once a project is yours.

Harbor for Beginners · Part 2 of 12

In Part 1 we just walked around. Everything was public, and you were a visitor with nothing to change. Now we make a spot that is actually yours. This is the part where Harbor stops being something you read and starts being something you use, because once you own a project you can push images to it, set its rules, and invite people in. The good news is that making one takes about thirty seconds.

Why you need your own project

On a shared registry you can open any public project and read it, but you cannot push anything into it or change a single setting, because none of it belongs to you. To do real work you need a project where you are the admin. So the very first hands-on step, before pushing images or anything else, is to make your own. Think of it like getting your own folder on a shared drive. Everyone can see the common folders, but you need one of your own before you can start dropping files in.

Public or private?

When you make a project, the dialog gives you one real choice: a single checkbox labelled Public. Here is what it does, in plain terms.

If the Public box isYour project isWhich means
Unticked (the default)PrivateOnly you and people you add can see it or pull from it.
TickedPublicAnyone can pull images from it without even logging in.

You can flip this later from the project settings, so there is no pressure to get it right now. For a sandbox you are just learning in, Private is perfectly fine, and that is what I left mine as.

Making the project

Here is the whole thing, start to finish.

  1. On the Projects page, click New Project in the top left.
  2. Type a name. Keep it lowercase with no spaces. I used pranay-project.
  3. Decide on the Public checkbox. I left it unticked, so my project is Private. That is the default and it is fine for practice.
  4. Click OK. That is it. Your new project appears in the list.
The New Project dialog with a name typed and the Public checkbox unticked
The New Project dialog. Give it a name, leave Public unticked to keep it private, and click OK.

A tour of every tab

Click your new project to open it, and the first thing you will notice is a long row of tabs across the top, more than the public projects in Part 1 ever showed you. They appear because you are the admin here. You will not touch most of them today, but it helps to know what each one is for, so here is the whole row, one at a time. Notice on every screen that the project reads Private, with the Project Admin role next to the name. Those are the signs that this one is yours.

Summary

The project at a glance: how many images it holds, and a breakdown of its members by role. Right now that is zero images and a single admin, you.

The Summary tab
Summary. Zero repositories so far, and one admin.

Repositories

The list of actual images in the project. It is empty until you push your first one, which is the whole job of Part 3.

The Repositories tab, empty
Repositories. Nothing here yet, exactly as expected.

Members

Who can get into the project and what they are allowed to do. So far it is just you, with the Project Admin role. This is where you would add teammates later as Guest, Developer, or Maintainer.

The Members tab showing one Project Admin
Members. One member, you, as Project Admin.

Labels

Custom tags you can stick on images to group and filter them, for example marking some as approved or as test builds. None yet.

The Labels tab, empty
Labels. A way to organize images once you have some.

Scanner

The image scanner attached to this project, here Trivy, with a Healthy badge. This is the engine behind the security checks we put to use later in the series.

The Scanner tab showing Trivy, Healthy
Scanner. Trivy is wired up and healthy.

P2P Preheat

An advanced speed feature. It pushes images out to your nodes ahead of time so a big pull feels instant when it is actually needed. Empty for now, and safe to ignore while you are learning.

The P2P Preheat tab, no policy
P2P Preheat. Useful at scale, not something to worry about yet.

Policy

Two housekeeping rules live here. Tag retention controls how many versions of an image to keep, and tag immutability locks a chosen tag so it cannot be overwritten. We set both in a later part.

The Policy tab with tag retention and immutability
Policy. Retention and immutability rules to keep the project tidy.

Robot Accounts

Service accounts for automation. Rather than putting your own password into a script or pipeline, you create a robot with just the permissions it needs. None yet.

The Robot Accounts tab, empty
Robot Accounts. Logins for scripts and pipelines, so you never reuse your own.

Webhooks

Tell another system when something happens in the project, like an image being pushed or scanned. Handy for CI pipelines and chat notifications. None yet.

The Webhooks tab, empty
Webhooks. Notify other tools when things happen here.

Logs

The project’s own audit trail. It already has one entry: you creating the project a moment ago. Every push, pull, and change will land here.

The Logs tab showing the project creation entry
Logs. The first line is the project being created, by you.

Configuration

The project’s rule book: public or private, whether to block risky images, whether to scan automatically on push, and more. Worth knowing it is here. We will set these properly later in the series.

The Configuration tab with security and scanning options
Configuration. Where the project’s rules are set.

What you have now

It does not look like much, an empty project with a name. But owning it is what unlocks everything ahead. From here you can:

  • Push your own images into it.
  • Add other people and decide what each of them can do.
  • Set rules, like how many versions to keep or whether to block risky images.

None of that was possible as a visitor. Now it is.


Harbor for Beginners, Part 2 of 12. Product names belong to their owners. The names and IDs in the screenshots come from a lab and are stand-ins.

About The Author


Discover more from Journal of Intelligent Infrastructure – By Dr Pranay Jha

Subscribe to get the latest posts sent to your email.

Leave a Reply

Your email address will not be published. Required fields are marked *

Architect’s Toolkit

About the Author

Dr. Pranay Jha is a Cloud and AI Consultant with 18+ years of experience in hybrid cloud, virtualization, and enterprise infrastructure transformation. He specializes in VMware technologies, multi-cloud strategy, and Generative AI solutions. He holds a PhD in Computer Applications with research focused on Cloud and AI, has published multiple research papers, and has been a VMware vExpert since 2016 and a VMUG Community Leader.

Discover more from Journal of Intelligent Infrastructure - By Dr Pranay Jha

Subscribe now to keep reading and get access to the full archive.

Continue reading