Overview
- Full name
docker.io/bitnamilegacy/harbor-notary-signer-archived- Registry
- docker.io
- Namespace
- bitnamilegacy
- Repository
- harbor-notary-signer-archived
- Cached tags
- 411
- Last synced
- 07/13/2026, 08:26 AM
Introduction
Harbor Notary Signer 镜像（Bitnami 归档版），Docker Content Trust 签名密钥管理，Harbor 镜像签名遗留组件。
Details
bitnamilegacy/harbor-notary-signer-archived 运行 Harbor Notary Signer（Bitnami 归档版），管理 Docker Content Trust 签名私钥并执行镜像签名操作。定位为镜像签名密钥服务（已归档），Harbor Notary 栈组件；建议迁移至 Cosign。
快速启动
helm install harbor harbor/harbor --set notary.enabled=true
推荐实践
# 迁移至 Cosign
cosign generate-key-pair
cosign sign --key cosign.key harbor.example.com/image:tag
核心参数说明
- 安装 — Harbor Helm Chart
- 组件 — Notary 签名器
- 状态 — Notary 已 deprecated
- 替代 — Cosign keyless 签名
Kubernetes
apiVersion: apps/v1
kind: Deployment
metadata:
name: harbor-notary-signer
spec:
replicas: 1
selector:
matchLabels:
app: harbor-notary-signer
template:
metadata:
labels:
app: harbor-notary-signer
spec:
containers:
- name: notary-signer
image: docker.io/bitnamilegacy/harbor-notary-signer-archived:0.6.0
ports:
- containerPort: 7899
volumeMounts:
- name: keys
mountPath: /etc/notary
volumes:
- name: keys
secret:
secretName: notary-signer-keys
---
apiVersion: v1
kind: Service
metadata:
name: harbor-notary-signer
spec:
selector:
app: harbor-notary-signer
ports:
- port: 7899
targetPort: 7899
Secret 存储签名密钥；Harbor 全栈 Helm 部署。