To roll back from an upgrade, you must have backed up the previous version of Harbor. For information about backing up Harbor before an upgrade, see .

Harbor 2.2 is compiled by Golang 1.15 which deprecated self signed certificate without SAN. If you enabled internal TLS and cert files are generated by Harbor prepare script, you must generate the internal certificates again, using command like this The certs generated by the old version prepare script didn’t include the SAN extension. If you manage the certs file, make the SAN is included, if not please check Configure Internal TLS communication between Harbor Component. For more information about Go’s break please refer and this issue.