Configuring Harbor Proxy with Dockerhub Organizational Account

[winterwonderland17]

Does anyone know if this is intended/is there any plan to get functionality working with this? Dockerhub has deprecated service accounts, and to avoid using personal accounts for a production Harbor deployment proxy config, I'd like to use an OAT.

https://docs.docker.com/docker-hub/service-accounts/#enhanced-service-account-add-on-tiers

https://docs.docker.com/enterprise/security/access-tokens/

When I try to enter the credentials, it fails auth. If I try saving it regardless, I get a 500 Internal Server Error, and checking the logs it's explicit about the organizational account:

[ERROR] [/lib/http/error.go:58]: {"errors":[{"code":"UNKNOWN","message":"unknown: login to dockerhub error: login to dockerhub error: {"detail":"Cannot log into an organization account"}\n\n"}]

Please advise.

[Vad1mo]

I think the trick is to use the Registry Endpoint "Docker Registry" and not Docker Hub

If that worked, leave a comment so we can update the docs accordingly.

[winterwonderland17]

No luck, I get a "Failed to ping endpoint" error. For some context:

When I select the DockerHub option, that works with my personal DockerHub credentials.
When I select the Docker Registry option, it makes me populate the endpoint URL. I populated it with the same endpoint that was listed in DockerHub option "https://hub.docker.com". Does that endpoint need to be different? Assumed it would be the same, since that's what's there for DockerHub and works with my personal account.

[Vad1mo]

Wrong endpoint: (in UI it says for the user https://hub.docker.com, but we actually use https://registry-1.docker.io)

Please use https://docker.io: This is a commonly used shorthand that is automatically translated to index.docker.io (or the equivalent endpoint https://registry-1.docker.io)

[wy65701436]

@winterwonderland17

According to the official Docker Hub documentation, it seems that you need to use the organization name as the username when logging in. Could you please double-check and confirm this?

docker login --username <YOUR_ORGANIZATION_NAME>
Password: [paste your OAT here]