https://myvirtualcloud.net/tags/harbor/Recent content in Harbor on myvirtualcloud.netHugoen-usAndre LeiboviciTue, 15 Sep 2026 09:00:00 +1200https://myvirtualcloud.net/resolving-the-harbor-uid-10000-vs-freeipa-admin-collision-on-kubernetes/Tue, 15 Sep 2026 09:00:00 +1200https://myvirtualcloud.net/resolving-the-harbor-uid-10000-vs-freeipa-admin-collision-on-kubernetes/<p><code>getent passwd 10000</code> on a Kubernetes node that resolves FreeIPA through sssd returns <code>admin</code>. Harbor&#39;s Helm chart (1.19.2, app v2.15.2) hard-codes <code>runAsUser</code> and <code>fsGroup</code> to 10000 for every component except its Valkey cache. FreeIPA installed with <code>--idstart=10000</code> hands that exact number to the first account it creates, the built-in <code>admin</code>, and gid 10000 to the <code>admins</code> group. Two sensible defaults, and a registry that would write every image layer to shared NFS storage as the directory administrator.</p>