Introduction
Alauda Artifact Hub Shim is an ACP cluster plugin that provides an offline,
Artifact Hub-compatible service for Tekton catalog resources. It gives Tekton
hub resolvers and the DevOps Hub UI a stable in-cluster endpoint for discovering
and retrieving Task, Pipeline, and StepAction resources without depending
on a public Artifact Hub service.
Artifact Hub Shim is intended for platform administrators and DevOps users who need a centrally managed catalog on ACP. Administrators install and configure the plugin, while pipeline authors consume catalog resources through Tekton remote references or browse them in the DevOps UI.
Key Benefits
- Air-gap ready: the plugin, built-in catalog, and required tool images can be delivered through the ACP offline package and private registry.
- Tekton-native consumption: pipeline definitions use the standard Tekton hub resolver contract instead of downloading Tasks at authoring time.
- Central catalog management: administrators can combine the built-in
catalog with additional Git-backed catalogs registered through Kubernetes
ConfigMapresources. - ACP integration: the plugin supplies the compatibility APIs used by the DevOps Hub UI and participates in ACP authentication and authorization for UI requests.
- Operational resilience: source failures are isolated, the last valid snapshot remains available where possible, and the API supports multiple read replicas with pod-local runtime storage.
Typical Scenarios
- Use the built-in ACP catalog to reference reusable Tasks and Pipelines from Tekton workloads.
- Publish an internal Git repository as a private or organization-wide catalog.
- Browse and inspect catalog resources from the DevOps Hub UI.
- Deliver mail and execution-overview templates with catalog resources.
- Keep tool-image and template
ConfigMapresources synchronized into approved namespaces.
Limitations
- Artifact Hub Shim implements the Artifact Hub and legacy Hub API subsets required by Tekton and ACP. It is not a general-purpose replacement for the public Artifact Hub website or all Artifact Hub APIs.
- Git-backed catalogs must be reachable from the cluster. In an air-gapped environment, use an internal Git service and internal credentials.
- Resolver-compatible Artifact Hub endpoints do not carry an end-user token. Repository visibility on that path is enforced by the optional admission extension and should not be treated as a boundary for untrusted direct API clients. UI-compatible endpoints use ACP or Kubernetes authorization.
- Artifact Hub Shim is maintained as a rolling release. Only the latest released version receives fixes. See Lifecycle Policy.