Starting September 9, 2024, each new Container Registry Personal Edition instance is assigned a region-specific exclusive endpoint. This change improves data isolation and access efficiency, but also introduces access restrictions that differ from earlier instances.
Endpoint format
New Personal Edition instances (created on or after September 9, 2024) use a different endpoint format from earlier instances.
| Endpoint type | New Personal Edition instances | Earlier Personal Edition instances |
|---|---|---|
| Public endpoint | crpi-xxxx.cn-hangzhou.personal.cr.aliyuncs.com |
registry.cn-hangzhou.aliyuncs.com |
| Virtual Private Cloud (VPC) endpoint | crpi-xxxx-vpc.cn-hangzhou.personal.cr.aliyuncs.com |
registry-vpc.cn-hangzhou.aliyuncs.com |
The new endpoint follows the pattern crpi-<instance-id>[-vpc].<region-id>.personal.cr.aliyuncs.com, where:
-
crpi-identifies the endpoint as a Container Registry Personal Edition instance endpoint. -
<instance-id>is the unique identifier assigned to your instance. -
-vpcis appended for VPC endpoints only. -
<region-id>is the region where your instance is located, for example,cn-hangzhou.
Use the exclusive endpoint to access all image repositories in your instance. Earlier instances whose endpoints start with registry continue to use the old format.
Access restrictions
Because new Personal Edition instances use an exclusive endpoint with stronger identity isolation, the following restrictions apply.
| Restriction | Details |
|---|---|
| A secret is required to pull images | Anonymous image pulls are not supported. For setup instructions, see Pull images from a Container Registry instance without using a secret. |
| Public endpoints cannot be used to pull images | You cannot use the public endpoints of new Personal Edition instances to pull images. |
| Harbor remote replication is not supported | You cannot use Harbor's remote replication to synchronize images to new Personal Edition instances. For more information, see Use the remote replication capability of Harbor to synchronize images on a Harbor registry to a Container Registry Enterprise Edition instance and implement geo-disaster recovery. |
| One RAM user can set the login password | Only one RAM user can set the image repository login password. |
Background
Before September 9, 2024, all Personal Edition instances shared a common endpoint (for example, registry.cn-hangzhou.aliyuncs.com). Starting that date, when you create a Personal Edition instance you must select a region, and you can use the instance only in that region. Each new Personal Edition instance is assigned its own exclusive endpoint.
For details about the scope of this change, see \[Product update\] Announcement on the adjustment of Container Registry Personal Edition. For available regions, see Supported regions.