Stay organized with collections
Save and categorize content based on your preferences.
Google Distributed Cloud (GDC) air-gapped Managed Harbor Service (MHS) is a fully managed service that lets you store and manage container images, even in air-gapped environments completely isolated from the internet or other networks.
Harbor is an open source registry that secures artifacts with policies and
role-based access control, ensuring images are scanned, free from
vulnerabilities, and images are signed as trusted.
GDC MHS provides control-plane operations, such as creating and
deleting Harbor registry instances. It enables GDC MHS
data-plane operations like pushing and pulling container images. Pushing your
container images to a container registry solution like Harbor provides a
centralized, secure, scalable, and efficient way to store, manage, and deploy
your Docker images.
Harbor is a Cloud Native Computing Foundation (CNCF) graduated open source
project that provides a built-in cloud container registry solution for
Kubernetes and Docker. With managed service integration, customers can deploy
their own Harbor instance to store and manage their artifacts on GDC MHS
offers the following features:
Harbor instances are automatically provisioned and managed by GDC.
Harbor is integrated with GDC's IAM and observability systems.
Harbor instances can be upgraded to the newer stable version.
Harbor is enhanced to meet GDC's compliance and quality requirements.
Performance
MHS has been tested and verified to support the limits specified on this page. The actual performance limits might be higher.
MHS supports the following performance limits:
Up to five Harbor instances in an organization. Only one instance is permitted
per user project.
Harbor has a limit of 128 GB per layer. Don't try to push layers larger than 128 GB.
Up to 1 TB in total storage. This storage limit might vary depending on the total storage available in object storage.
Handle at least 30 concurrent requests at a given time for various artifact sizes, from 1 KB to 1 GB.
Garbage collection
When you use MHS to add images to and delete images from the registry, unused data can build up over time. To avoid straining storage resources, MHS automatically performs garbage collection every 12 hours. You don't have to configure garbage collection manually.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eGoogle Distributed Cloud (GDC) air-gapped Managed Harbor Service (MHS) is a fully managed service for storing and managing container images in isolated environments.\u003c/p\u003e\n"],["\u003cp\u003eHarbor, an open-source registry, ensures secure artifact management through policies, role-based access control, vulnerability scanning, and image signing.\u003c/p\u003e\n"],["\u003cp\u003eGDC MHS offers control-plane operations for creating and managing Harbor instances, as well as data-plane operations for pushing and pulling container images.\u003c/p\u003e\n"],["\u003cp\u003eHarbor instances on GDC are automatically provisioned, managed, integrated with GDC's IAM and observability systems, and can be upgraded to the latest stable version.\u003c/p\u003e\n"]]],[],null,["# Managed Harbor Service overview\n\nGoogle Distributed Cloud (GDC) air-gapped Managed Harbor Service (MHS) is a fully managed service that lets you store and manage container images, even in air-gapped environments completely isolated from the internet or other networks.\nHarbor is an open source registry that secures artifacts with policies and\nrole-based access control, ensuring images are scanned, free from\nvulnerabilities, and images are signed as trusted.\n\nGDC MHS provides control-plane operations, such as creating and\ndeleting Harbor registry instances. It enables GDC MHS\ndata-plane operations like pushing and pulling container images. Pushing your\ncontainer images to a container registry solution like Harbor provides a\ncentralized, secure, scalable, and efficient way to store, manage, and deploy\nyour Docker images.\n\nHarbor is a Cloud Native Computing Foundation (CNCF) graduated open source\nproject that provides a built-in cloud container registry solution for\nKubernetes and Docker. With managed service integration, customers can deploy\ntheir own Harbor instance to store and manage their artifacts on GDC MHS\noffers the following features:\n\n- Harbor instances are automatically provisioned and managed by GDC.\n- Harbor is integrated with GDC's IAM and observability systems.\n- Harbor instances can be upgraded to the newer stable version.\n- Harbor is enhanced to meet GDC's compliance and quality requirements.\n\nPerformance\n-----------\n\nMHS has been tested and verified to support the limits specified on this page. The actual performance limits might be higher.\n\nMHS supports the following performance limits:\n\n- Up to five Harbor instances in an organization. Only one instance is permitted per user project.\n- Harbor has a limit of 128 GB per layer. Don't try to push layers larger than 128 GB.\n- Up to 1 TB in total storage. This storage limit might vary depending on the total storage available in object storage.\n- Handle at least 30 concurrent requests at a given time for various artifact sizes, from 1 KB to 1 GB.\n\nGarbage collection\n------------------\n\nWhen you use MHS to add images to and delete images from the registry, unused data can build up over time. To avoid straining storage resources, MHS automatically performs garbage collection every 12 hours. You don't have to configure garbage collection manually.\n\nWhat's next\n-----------\n\nTo enable MHS, you must [create a Harbor instance in your project](/distributed-cloud/hosted/docs/latest/gdch/platform-application/pa-ao-operations/create-harbor-instances)."]]
