# Container Registry / Artifact Storage

Use Aurora S3 as the object layer for OCI registries and charts.

> Available S3 endpoint: `a-s3.aur.lu` (France, Albi).

## Harbor

Enterprise‑grade OCI registry for container images and Helm charts. Supports S3 backends for registry blob storage, with features like replication, vulnerability scanning, and RBAC.

- Homepage: [goharbor.io](https://goharbor.io/)
- Docs: [Harbor Documentation](https://goharbor.io/docs/)

```yaml title="harbor.yml excerpt"
storage_service:
  s3:
    bucket: harbor-registry
    accesskey: <YOUR_ACCESS_KEY>
    secretkey: <YOUR_SECRET_KEY>
    region: us-east-1
    regionendpoint: https://a-s3.aur.lu
    secure: true
    v4auth: true
    s3forcepathstyle: true
```

## Quay

OCI registry by Red Hat with integrated security scanning and team workflows. Quay can use S3‑compatible storage for image layers and metadata.

- Homepage: [Quay](https://quay.io/)
- Docs: [Quay Documentation](https://docs.redhat.com/en/documentation/red_hat_quay)

```yaml title="/etc/quay/config.yaml excerpt"
DISTRIBUTED_STORAGE_CONFIG:
  default:
    - S3Storage
    - host: a-s3.aur.lu
      port: 443
      s3_bucket: quay-registry
      access_key: <YOUR_ACCESS_KEY>
      secret_key: <YOUR_SECRET_KEY>
      is_secure: true
      s3_location: us-east-1
      s3_use_sigv4: true
      s3_path_style: true
```