Removed features#
- SAML Support: MSR4 no longer supports SAML authentication and instead uses OpenID Connect (OIDC), a more modern and flexible standard that better aligns with cloud-native environments and improves security and scalability. Refer to OIDC Authentication for more information on configuring OIDC.
- Promotion Policies: Automated promotion policies are no longer included. Customers can adapt their CI/CD pipelines to achieve similar workflows.
- Swarm support: customers can use MSR4 as a single instance for Swarm environments instead of HA clusters.
| Feature | MSR2 | MSR3 | MSR4 (Harbor-Based) |
|---|---|---|---|
| Foundation | Docker Content Trust + Proprietary | Docker Content Trust + Proprietary | CNCF Harbor |
| Database | RethinkDB | RethinkDB | PostgreSQL Redis - Caching |
| Swarm | Supported | Supported | Not supported, but customers can use single instance install |
| OCI Compliance | Limited support | Limited support | Full OCI and Helm OCI support |
| User Interface | Basic | Improved | Modern and Intuitive |
| Quotas | Not available | Not available | Fully supported |
| Vulnerability Scanning | Synopsis only | Synopsis only | Trivy, Clair, Grype, or any 3rd party |
| Backup Integration | Internal | Internal | Full Velero support |
| Promotion Policies | Available | Available | Not Available |
| SAML support | Available | Available | Uses OIDC |
| Image Signing | Uses Docker Content Trust (DCT) based on Notary v1 | Uses Docker Content Trust (DCT) based on Notary v1 | Uses Cosign for image signing and verification |