When using aliyun-acr-credential-helper (passwordless add-on) to pull images from Alibaba Cloud Container Registry (ACR) Personal Edition instance in an ACK or ACS cluster, cross-region pulls will no longer be supported. The passwordless feature will be unavailable if the region of the ACR instance does not match the region configured in the add-on.
Effective date
Effective from 00:00, May 28, 2026 (UTC+08).
Changes
To standardize API operations and enhance service stability, Container Registry is updating the mechanism for passwordless image pulls. Following this adjustment, the aliyun-acr-credential-helper will strictly validate that the region of the ACR instance matches the region defined in the add-on configuration (specifically the regionId or acr-registry-info settings). If these regions do not match, the passwordless authentication will fail.
Solutions
Please verify and update the region configuration within your aliyun-acr-credential-helper (via regionId or acr-registry-info) to ensure it aligns with the region of your ACR Personal Edition instance. For detailed instructions, please refer to Pull images within the same account.
Related documents
Introduction to aliyun-acr-credential-helper in an ACK cluster.
Introduction to aliyun-acr-credential-helper in an ACS cluster.