Container Registry:Access an Enterprise Edition instance with a Personal Edition domain

Limits

• You can enable this compatibility feature for only one Enterprise Edition instance per region.

• If you use a Personal Edition domain name to pull images from other users' Personal Edition instances, you can pull only their public images.

• If a namespace in your Enterprise Edition instance has the same name as one in a Personal Edition instance, you cannot pull images from that Personal Edition namespace. Therefore, do not use strings specific to Container Service for Kubernetes (ACK), such as acs, as namespace names in your Enterprise Edition instance. This helps prevent access failures to official ACK container images.

• If you use the internet, you must manually configure domain name resolution to point to the endpoint of the Enterprise Edition instance.

• To use a RAM user to log on and pull images, you must also configure access credentials for the Enterprise Edition instance and grant the RAM user the required permissions. For more information, see RAM authorization.

How it works

Scenarios

Step 1: Enable Personal Edition domain compatibility

1. Log on to the Container Registry console.

2. In the top navigation bar, select a region.

3. On the Instances page, click the Enterprise Edition instance that you want to manage.

4. In the left-side navigation pane, choose Repository > Domain.

5. On the Domain page, turn on the Support Personal Edition Instance Domains switch.

   Important

   To use the compatibility feature, you must submit a ticket to add your Enterprise Edition instance to the whitelist.

6. In the Configure Resolution dialog box, select Confirm to Enable the feature of supporting personal edition instance domains and click Confirm.

   After the compatibility feature is enabled, two Personal Edition domain names are added to the Domain page. For example, if the instance is in the China (Hangzhou) region, the internet domain name registry.cn-hangzhou.aliyuncs.com and private network domain name registry-vpc.cn-hangzhou.aliyuncs.com are added.

   Important

   It takes a few seconds to enable the compatibility feature. During this period, you cannot manage namespaces or configure network access control.

   After the compatibility feature is enabled, images that are pushed by using a Personal Edition domain name are stored in the Enterprise Edition instance instead of the Personal Edition instance.

Step 2: Configure domain name resolution

Before using a Personal Edition domain name to access an Enterprise Edition instance, you must configure domain name resolution. The procedure depends on the domain name type.

• If you use a private network, Alibaba Cloud DNS PrivateZone automatically resolves the domain name for your bound VPC. No further action is required.

• If you use the internet, you must manually add the CIDR block of your on-premises machine to an internet whitelist and configure domain name resolution. This section uses an internet connection as an example.

1. Add an internet whitelist and get the internet domain name.

   1. Log on to the Container Registry console.

   2. In the top navigation bar, select a region.

   3. In the left-side navigation pane, click Instances.

   4. On the Enterprise Edition instance page, choose Repository > Access Control.

   5. On the Access Control page, click the Internet tab.

      On the Internet tab, note the Domain address .

   6. Turn on the Enable Access over Internet switch and click Add Internet Whitelist.

   7. In the Add Internet Whitelist dialog box, enter the address range of the local host and a description, then click Confirm.

2. Run the following command on your on-premises machine to get the IP address of the domain name.

   ping <Domain name>

   Get the IP address of the domain name from the command output.

3. Add the following entry to the hosts file on your on-premises machine and save the file.

   <IP address of the domain name> <Internet domain name of the Personal Edition instance>

Step 3: Access the instance via Personal Edition domain

After you enable the compatibility feature, you can use the Personal Edition domain name to log on to the Enterprise Edition instance and push images to its image repositories.

1. On the Domain page, obtain the internet domain name. In this example, registry.cn-hangzhou.aliyuncs.com is used.

2. Run the following command on a Docker client to log on to the Enterprise Edition instance.

   docker login registry.cn-hangzhou.aliyuncs.com

   Enter your username and password as prompted. The Login Succeeded message indicates a successful logon.

3. Push an image.

   1. Run the following command to tag the image.

      docker tag <Image ID> registry.cn-hangzhou.aliyuncs.com/<Namespace>/<Image repository name>:<Image tag>

   2. Run the following command to push the image to the Enterprise Edition instance.

      docker push registry.cn-hangzhou.aliyuncs.com/<Namespace>/<Image repository name>:<Image tag>

      On the Repositories page of the Enterprise Edition instance, click the name of the target image repository and select Image Version. On the Image Version page, you can see the pushed image. This indicates that you have successfully accessed the Enterprise Edition instance by using a Personal Edition domain name.