Container Registry:Use Helm earlier than V3.7 to push and pull charts

Create a namespace

1. Log on to the Container Registry console.

2. In the left-side navigation pane, click Instances.

3. On the Instances page, click the Enterprise Edition instance that you want to manage.

4. Log on to the Container Registry console.

5. In the left-side navigation pane, choose Repository > Namespace.

6. On the Namespace page, click Create Namespace.

7. In the Create Namespace dialog box, configure Namespace, Automatically Create Repository, and Default Configurations for Automatically Created Repositories, and then click Confirm.

Create an image repository

1. In the left-side navigation pane, choose Repository > Repositories.

2. On the Repositories page, click Create Repository.

3. In the Repository Info step, configure Namespace, Repository Name, Repository Type, Tags, Accelerated Images, Summary, and Description, and then click Next.

4. In the Code Source step, configure Code Source, Build Settings, and Build Rules, and then click Create Repository. The following table describes the key parameters.

   Parameter	Description
   Code Source	The code source.
   Automatically Build Images When Code Changes	Triggers a build automatically when code is committed to a branch.
   Build With Servers Deployed Outside Chinese Mainland	Builds images on overseas servers and pushes them to the repository in the specified region. Enable this option if your Dockerfile pulls dependencies from sites outside the Chinese mainland and the cross-border connection is unstable.
   Build Without Cache	Pulls the base image from the source repository on every build, which may increase build time. Disable this option to speed up builds.

5. On the Repositories page, click the created image repository. If Build appears in the left-side navigation pane of the repository management page, the image repository is bound to the source code repository.

Configure an access credential

Use a password or token as the access credential for the image repository. This topic uses a password.

1. In the left-side navigation pane, choose Repository > Access Credential.

2. On the Access Credential page, click Set Password.

3. In the Set Password dialog box, set Password and Confirm Password, and then click Confirm.

Configure an access control list (ACL)

Enable internet access or add a VPC to make sure that charts can be pushed to the image repository. This topic uses internet access. For VPC access, see Configure a VPC ACL.

1. In the left-side navigation pane, choose Repository > Access Control.

2. On the Access Control page, click the Internet tab.

3. Turn on Enable Access over Internet, and then click Add Internet Whitelist.

4. In the Add Internet Whitelist dialog box, specify the CIDR block and a description, and then click Confirm.

(Optional) Enable anonymous pull

After you enable anonymous pull, users can pull charts from a public image repository without logging on.

1. Log on to the Container Registry console.

2. In the top navigation bar, select a region.

3. In the left-side navigation pane, click Instances.

4. On the Instances page, click the Enterprise Edition instance that you want to manage.

5. Log on to the Container Registry console.

6. In the Instance Settings section on the right side of the Overview page, turn on Pull from Anonymous Users.

7. In the Tips dialog box, click Confirm.

Set up Helm

1. Download Helm V3 from the official website. This topic uses V3.0.2. Run the following command to verify your version:

   helm3 version -c

2. Enable the OCI experimental feature:

   export HELM_EXPERIMENTAL_OCI=1

Log in to the Enterprise Edition instance

Replace <Registry logon name> with your Alibaba Cloud account and <instance-name>.<region>.cr.aliyuncs.com with your instance endpoint.

helm3 registry login --username=<Registry logon name> <Name of the Enterprise Edition instance>.<Region in which the Enterprise Edition instance resides>.cr.aliyuncs.com

Example:

helm3 registry login --username=123@188077086902**** m**-registry.cn-hangzhou.cr.aliyuncs.com

When prompted, enter the password you set in Configure an access credential.

To pull charts from a public image repository without logging on, turn on Pull from Anonymous Users on the Overview page of your Enterprise Edition instance.

Push a chart

1. Create a sample chart:

   helm3 create helloworld

2. Save the chart directory as an image tag in your Enterprise Edition instance:

   helm3 chart save helloworld <Name of the Enterprise Edition instance>.<Region in which the Enterprise Edition instance resides>.cr.aliyuncs.com/<Namespace name>/<Name of the image repository>:<Image tag>

   Example:

   helm3 chart save helloworld m**-registry.cn-hangzhou.cr.aliyuncs.com/m**/test:latest

3. Push the chart to the image repository:

   helm3 chart push <Name of the Enterprise Edition instance>.<Region in which the Enterprise Edition instance resides>.cr.aliyuncs.com/<Namespace name>/<Name of the image repository>:<Image tag>

   Example:

   helm3 chart push m**-registry.cn-hangzhou.cr.aliyuncs.com/m**/test:latest

Pull a chart

1. Pull the chart tag from the image repository:

   helm3 chart save helloworld <Name of the Enterprise Edition instance>.<Region in which the Enterprise Edition instance resides>.cr.aliyuncs.com/<Namespace name>/<Name of the image repository>:<Image tag>

   Example:

   helm3 chart save helloworld m**-registry.cn-hangzhou.cr.aliyuncs.com/m**/test:latest

2. Export the chart to a local directory:

   helm3 chart export <Name of the Enterprise Edition instance>.<Region in which the Enterprise Edition instance resides>.cr.aliyuncs.com/<Namespace name>/<Name of the image repository>:<Image tag> -d .

   Example:

   helm3 chart export m**-registry.cn-hangzhou.cr.aliyuncs.com/m**/test:latest -d .

3. Install the chart:

   helm install helloworld ./helloworld