Access credentials guarantee the secure upload and download of container images and Helm charts. This topic describes how to configure an access credential for a Container Registry Enterprise Edition instance.
Background information
Access credentials are independent of Alibaba Cloud accounts and passwords. Access credentials are available in two types:
- Password: A password is valid permanently. Keep it safe. If the password is lost, you can reset it.
- Temporary token: A temporary token is valid for 1 hour. If the temporary token is obtained through Security Token Service (STS), the temporary token is valid so long as the STS token is valid.
Procedure
- Log on to the Container Registry console. In the top navigation bar, select the target region.
- In the left-side navigation pane, choose .
- On the Instances page, click the Container Registry Enterprise Edition instance to be configured.
- In the left-side navigation pane, choose .
- On the page that appears, click Set Password.
- In the Set Password dialog box, enter the password and confirm password.
- Click OK.
- Optional:Set a temporary token. For more information, see GetAuthorizationToken.
What to do next
- Obtain the domain name for accessing the Container Registry Enterprise Edition instance
over a Virtual Private Cloud (VPC), the public network, or the classic network.
Note You must go to the Access Control page and configure whitelists for different network environments first.
- Use the access credential to log on to the Container Registry Enterprise Edition instance.
Example:
$ sudo docker login --username=<Logon account> pey-test001-registry-vpc.cn-shanghai.cr.aliyuncs.com