Cosmoner Container Registry vs Harbor

Cosmoner Container Registry is a managed private registry backed by Amazon ECR for storing container images used by apps. Developers can push and pull images from a laptop or CI system with Docker and a Cosmoner API key. Images in a project registry appear in the Apps image deployment flow, where deployments authenticate without a pull secret. Scanning on push is enabled by default and checks images against known vulnerabilities. Images use AES256 encryption by default, with a customer KMS key available for repositories created afterward. Retention settings can keep a selected number of recent images and expire untagged images after a chosen number of days. Repositories are private by default; public repositories require a monthly egress cap and revert to private when it is reached. The product lists nine regions across North America, Europe, and Asia Pacific, and a registry’s region cannot be changed after creation. Uploads are not charged; egress, storage, and a registry fee are billed separately. The registry fee is $1 a month, prorated from creation; storage is $0.25 a month per GB, and egress is $0.15 a month per GB after the first 10 GB per organization per billing period.

Harbor is an open-source registry for managing artifacts across cloud-native platforms such as Kubernetes and Docker. It offers a web UI and extensible API, and can be installed on Kubernetes or a system with Docker support. Security features include policies, role-based access control, vulnerability scanning, and image signing and validation. Image scanning uses Trivy when enabled during installation, and Harbor can connect to additional scanners. It replicates images and charts to or from other registries in pull or push mode; listed adapters include Docker Hub, Amazon ECR, Google Container Registry, Azure Container Registry, and GitLab Registry. Authentication options are database, LDAP/Active Directory, and OIDC, though choosing database authentication and adding local users prevents a later switch to another mode. Project storage quotas are unlimited by default but can be set globally or per project. Robot account secrets are not stored by Harbor, so they must be saved when created; robot accounts cannot log into the user interface. Harbor is a CNCF Graduated project. HTTPS is recommended for production use.