Access credentials guarantee the secure upload and download of container images and Helm charts. This topic describes how to configure an access credential for a Container Registry Enterprise Edition instance.

Background information

Access credentials are independent of Alibaba Cloud accounts and passwords. Access credentials are available in two types:

  • Password: A password is valid permanently. Keep it safe. If the password is lost, you can reset it.
  • Temporary token: A temporary token is valid for 1 hour. If the temporary token is obtained through Security Token Service (STS), the temporary token is valid so long as the STS token is valid.

Procedure

  1. Log on to the Container Registry console. In the top navigation bar, select the target region.
  2. In the left-side navigation pane, choose Enterprise Instances > Instances.
  3. On the Instances page, click the Container Registry Enterprise Edition instance to be configured.
  4. In the left-side navigation pane, choose Instances > Access Credential.
  5. On the page that appears, click Set Password.
  6. In the Set Password dialog box, enter the password and confirm password.
  7. Click OK.
  8. Optional:Set a temporary token. For more information, see GetAuthorizationToken.

What to do next

Log on to the Container Registry Enterprise Edition instance.
  1. Obtain the domain name for accessing the Container Registry Enterprise Edition instance over a Virtual Private Cloud (VPC), the public network, or the classic network.
    Note You must go to the Access Control page and configure whitelists for different network environments first.
  2. Use the access credential to log on to the Container Registry Enterprise Edition instance. Example: 
    $ sudo docker login --username=<Logon account> pey-test001-registry-vpc.cn-shanghai.cr.aliyuncs.com