A private registry becomes part of the deployment path the moment CI pushes an image that production must later pull. Installing Harbor is therefore the easy decision. The harder one is accepting ownership of its certificates, database, artifact storage, scanner data, robot credentials, cleanup jobs and restore ...