Cloudfleet Container Registry vs Harbor

Cloudfleet Container Registry, or CFCR, is a managed OCI-compliant registry for storing, sharing, and managing container images. It supports Docker images, multi-architecture images, Helm charts, and other OCI artifacts, and is included with every Cloudfleet organization without extra provisioning. Regions are available in Europe, North America, and Asia Pacific; the European region uses EU-based infrastructure. Teams can push and pull through the standard Docker CLI or Docker Registry HTTP API V2. Cloudfleet Kubernetes Engine clusters authenticate automatically with short-lived credentials, avoiding image pull secrets or service accounts. CI/CD examples cover GitHub Actions, GitLab CI, Jenkins, CircleCI, and Azure DevOps. Each organization receives an isolated namespace, with administrators able to push and pull while users have pull-only access. Authenticated users and Cloudfleet Kubernetes Engine clusters have no pull rate limits. The first 5 GB of storage is free, unlimited data transfer is listed as free, and Kubernetes Engine pulls have no egress fees.

Harbor is an open-source registry for managing artifacts across cloud-native platforms such as Kubernetes and Docker. It offers a web UI and extensible API, and can be installed on Kubernetes or a system with Docker support. Security features include policies, role-based access control, vulnerability scanning, and image signing and validation. Image scanning uses Trivy when enabled during installation, and Harbor can connect to additional scanners. It replicates images and charts to or from other registries in pull or push mode; listed adapters include Docker Hub, Amazon ECR, Google Container Registry, Azure Container Registry, and GitLab Registry. Authentication options are database, LDAP/Active Directory, and OIDC, though choosing database authentication and adding local users prevents a later switch to another mode. Project storage quotas are unlimited by default but can be set globally or per project. Robot account secrets are not stored by Harbor, so they must be saved when created; robot accounts cannot log into the user interface. Harbor is a CNCF Graduated project. HTTPS is recommended for production use.