This topic describes how to configure an access credential for a Container Registry Enterprise Edition instance.
Background information
Access credentials are used for RAM policy-based authentication on clients such as Docker and Containerd. For more information, see Configure policies for RAM users to access Container Registry. After successful authentication, you can upload and download container images or Helm charts. We recommend that you configure an access password for an instance that is different from the password used to log on to the Container Registry console. This prevents impacts on your business due to leakage of the password on the client.
Access credentials are independent of Alibaba Cloud accounts and passwords. Access credentials are available in two types:
Password: A password is valid permanently. Keep it safe. If you forget your password, you can reset it.
Temporary token: A temporary token is valid for 1 hour. If the temporary token is obtained by using Security Token Service (STS), the temporary token is valid so long as the STS token is valid.
Alibaba Cloud accounts and RAM users have independent access credentials. RAM users cannot use the access credentials of their Alibaba Cloud accounts to access Container Registry Enterprise Edition instances. RAM users must configure their own access credentials.
Procedure
Log on to the Container Registry console.
In the top navigation bar, select a region.
In the left-side navigation pane, click Instances.
On the Instances page, click the Enterprise Edition instance that you want to manage.
In the left-side navigation pane of the management page of the Container Registry Enterprise Edition instance, choose .
On the Access Credential page, click Set Password.
In the Set Password dialog box, enter a password for the Password parameter, and enter the password again for the Confirm Password parameter. Then, click Confirm.,
What to do next
Log on to the Container Registry Enterprise Edition instance.
Configure access over the Internet or virtual private clouds (VPCs). For more information, see Configure access over the Internet or Configure a VPC ACL.
Use the access credentials to log on to the Container Registry Enterprise Edition instance. Example:
docker login <Name of the Container Registry Enterprise Edition instance>-registry.<Region ID of the instance>.cr.aliyuncs.com