Downloading Docker images via the HCL Harbor Container Registry

HCL Commerce 9.1.15.0 and later versions support the entitlement-enabled, cloud-native HCL Harbor Container Registry. This registry provides secure access to the latest Docker images. To use this registry, you must log in to the HCL Harbor interface and configure CLI secrets for your deployment environment. You can integrate this authentication method into a CI/CD pipeline to automate image retrieval for Kubernetes or Docker Compose.

Note:

CFIUS images are not impacted by this implementation.
Additional HCL Commerce software, such as git bundles, and third-party software packages, can only be obtained via the My HCLSoftware portal.

Procedure

To log in to HCL Harbor, and set your HCL Harbor CLI secret:

Navigate to HCL Harbor in a web browser.
Select LOGIN VIA OIDC PROVIDER and log in with your HCL credentials.
Navigate to the Projects > commerce project.
You are presented with various tabs including Repositories, which contains the latest versions of HCL Commerce Docker images. You can download the latest version of HCL Commerce images directly from this tab.
Optional: If you are using Kubernetes for your deployment, obtain and add the CLI secret to your Kubernetes configuration.
1. Obtain or create the HCL Harbor CLI secret.
  Open your user profile within HCL Harbor. Here you can obtain your CLI secret, or enter a secret string of your choice.
2. Use the command below with your CLI secret to create the image pull secret within your Kubernetes configuration.
```
kubectl create secret docker-registry secretName --docker-server=hclcr.io --docker-username=userId --docker-password=CLISecret --namespace=namespace
```
  Where:
  
  secretName
  
  A unique identifier for the pull secret that you are creating.
  
  userId
  
  Your HCL username.
  
  CLISecret
  
  Your HCL Harbor CLI secret.
  
  namespace
  
  The namespace for your deployment.
Optional: If you are using Docker Compose for your deployment, specify your HCL Harbor credentials during deployment via the Docker command line interface.
1. Run docker login hclcr.io.
2. Enter your HCL user name as the user name.
3. Enter your HCL Harbor CLI secret as your password.
Docker images can then be pulled using the following command.
```
docker pull hclcr.io/commerce/server_name:tag
```
For example:
- docker pull hclcr.io/commerce/ts-app:9.1.15.0
- docker pull hclcr.io/commerce/ts-app:9.1.15.0-ppc64le

Results

You have successfully logged into HCL Harbor Container Registry, and obtained or generated your own secret for your user. You can now obtain the latest HCL Commerce Docker images via the web interface, or integrate this download method within your CI/CD pipeline.