Container Registry:Release notes

Feature

Description

Region

References

Diagnosis analysis

Diagnosis analysis leverages the ACK team's container image expertise and diagnostic technologies of technicians with large model technologies to provide in-depth analysis and fixing suggestions to improve the usage efficiency and user experience of Container Registry. Identifies exceptions, threats, and optimization opportunities during the image building process to ensure a smooth and secure operation procedure.

All regions

Diagnosis analysis

Feature

Description

Region

References

Image content analysis

Analyzes the composition and attributes of container images to detect security vulnerabilities, perform compliance checks, and manage and track software versions. Helps optimize component dependencies and improve container security and performance.

China (Hangzhou), China (Shanghai), China (Beijing), China (Shenzhen), China (Hong Kong), Singapore, US (Virginia), and Germany (Frankfurt)

Container image content analysis

Feature

Description

Region

References

Instance audit

Lets you query push and pull logs by time range for real-time monitoring and analysis of user activities. Improves security, supports compliance management, and aids troubleshooting.

All regions

Instance audit

Feature

Description

Region

References

Image event

Provides an event timeline for image push, pull, and delete operations. Helps analyze security risks such as abnormal public IP addresses and image content threats.

All regions

Image usage analysis

Two-way image replication

A destination image repository in a replication can also serve as a source repository to replicate images to a repository of another Container Registry instance. Supports multi-region and multi-environment deployment requirements of enterprise users.

All regions

Replicate images within the same account

Feature

Description

Applicable scope

Region

References

New region

Container Registry is available in the China (Guangzhou) region.

Container Registry Enterprise Edition instances and Container Registry Personal Edition instances

China (Guangzhou)

Supported regions

New region

Container Registry is available in the China (Ulanqab) region.

Container Registry Enterprise Edition instances and Container Registry Personal Edition instances

China (Ulanqab)

Supported regions

Container image building in VPC mode

Build container images in VPC mode. Create GitLab services and internal services such as Maven repositories in a VPC without exposing a public endpoint.

Container Registry Enterprise Edition instances

All regions

Build container images with VPC secure build mode

Feature

Description

Applicable scope

Region

References

New region

Container Registry is available in the China (Hohhot) region.

Container Registry Enterprise Edition instances

China (Hohhot)

None

Enhanced security policies for cloud-native application delivery chains

Block specific CVE vulnerabilities and configure global vulnerability exemption whitelists. Provides a more flexible security policy evaluation mechanism to improve DevSecOps delivery efficiency and quality.

Container Registry Enterprise Edition instances

All regions

Create a delivery chain

Feature

Description

Applicable scope

Region

References

Improved image deletion performance

Supports non-blocking garbage collection (GC). Image pushes and pulls continue unaffected during deletion. Handles multi-architecture artifacts and accelerated images. Deletion speed increased 5x.

Container Registry Enterprise Edition instances

All regions

Delete image tags

Feature

Description

Applicable scope

Region

References

Optimized password-free component

The password-free component aliyun-acr-acceleration-suite changed from a default cluster component to an optional one. Credential activation time is shorter, improving the password-free image pull experience.

Container Registry Enterprise Edition instances

All regions

aliyun-acr-acceleration-suite

Feature

Description

Applicable scope

Region

References

Access to an Enterprise Edition instance by using the endpoint of a Personal Edition instance

Enterprise Edition instances can be accessed using Personal Edition endpoints. After migrating images from Personal Edition to Enterprise Edition, you can continue using the Personal Edition endpoint to access and manage the Enterprise Edition instance without changing client configurations.

Container Registry Enterprise Edition instances

All regions

Access an Enterprise Edition instance with a Personal Edition domain

Acceleration of cross-border replication

Accelerates cross-border image replication through scheduling policies and network link optimization. Image replication success rate improved to at least 99.9%.

Container Registry Enterprise Edition instances

All regions

None

Feature

Description

Applicable scope

Region

References

New region

Container Registry is available in the Philippines (Manila) region.

Container Registry Personal Edition instances

Philippines (Manila)

Supported regions

New region

Container Registry is available in the Malaysia (Kuala Lumpur) region.

Container Registry Enterprise Edition instances

Malaysia (Kuala Lumpur)

Supported regions

Event notification

Integrates with EventBridge to deliver instance-level event notifications. Subscribe to image creation, scan, replication, signing, and delivery chain events. Supports DingTalk, HTTP Gateway, and HTTPS Gateway notification methods to improve DevSecOps integration.

Container Registry Enterprise Edition instances

All regions

Create an event notification rule

Cloud-native artifact center

Provides Alibaba Cloud-certified base container images such as Dragonwell, Alibaba Cloud Linux 2, and Alibaba Cloud Linux 3 for enterprise and individual developers. Improves containerization efficiency and security.

Container Registry Enterprise Edition instances

All regions

None

Feature

Description

Applicable scope

Region

References

Image import

Import images and metadata from a Personal Edition instance to an Enterprise Edition instance in the ACR console. Accelerates migration from Personal Edition to Enterprise Edition.

Container Registry Enterprise Edition instances

All regions

Import images from Personal Edition to Enterprise Edition

Silent GC mode

Enables silent GC mode. Container images can still be pulled from or pushed to repositories while OSS buckets are being deleted, improving artifact management experience.

Container Registry Enterprise Edition instances

All regions

Clean up OSS bucket storage

Feature

Description

Applicable scope

Region

References

Expansion of P2P distribution scenarios

ACR@Edge mode supports edge and data center scenarios. Image cache and P2P distribution reduce back-to-origin bandwidth and accelerate image pulls.

Container Registry Enterprise Edition instances

All regions

Use P2P acceleration in an edge cluster

Feature

Description

Applicable scope

Region

References

Manual image replication and replication retry

Supports manual image replication and replication retries, improving global image replication experience.

Container Registry Enterprise Edition instances

All regions

• Replicate images within the same account

• Cross-account instance synchronization

Feature

Description

Applicable scope

Region

References

Event notification

Subscribe to artifact lifecycle events including security scan, delivery chain, image signing, replication, and build. Notifications delivered through EventBridge channels such as DingTalk and text messages.

Container Registry Enterprise Edition instances

China (Shanghai), China (Shenzhen), and China (Hong Kong)

This feature is available for minor versions. No documentation is available.

Feature

Description

Applicable scope

Region

References

OCI artifact management

Manage more OCI artifact types throughout their lifecycle, including container images, Helm charts, and Cloud Native Application Bundles (CNAB). Store, distribute, and version-manage different artifact types in a unified way.

Container Registry Enterprise Edition instances

All regions

What is Container Registry?

Feature

Description

Applicable scope

Region

References

P2P acceleration V2.0

P2P acceleration upgraded to V2.0:

• Install the P2P component from the ACK console Add-ons page or in on-premises Kubernetes clusters. No accelerated image deployment required.

• Distribute images to 1,000+ nodes in P2P mode. Download speed improved by 100%.

• P2P distribution to nodes using both ECS instances and elastic container instances, improving elastic scaling response speed.

• P2P distribution across multiple clusters in different VPCs, improving distribution flexibility.

Container Registry Enterprise Edition instances

All regions

Use P2P acceleration in ACK or ACK serverless clusters

Feature

Description

Applicable scope

Region

References

Update of the image build feature

Image build updated with improvements in source code repository diversity, build speed, and user experience:

• Access Apsara DevOps Codeup and Gitee source code repositories. Auto-trigger image builds on code changes.

• Multi-level cache policies and overseas data centers accelerate image builds by 30%.

• Tag-based build rules and build settings improve cloud-native DevOps experience and efficiency.

Container Registry Enterprise Edition instances

All regions

Build images on an Enterprise Edition instance

Feature

Description

Applicable scope

Region

References

Image version management and instance-level image deletion

Configure retention policies to auto-delete expired image versions at the instance level. Retain a specific number of recent images or images matching a regular expression; other versions are automatically deleted.

Container Registry Enterprise Edition instances

China (Beijing), China (Hangzhou), and China (Shanghai)

• Delete image tags

• Clean up OSS bucket storage

Feature

Description

Applicable scope

Region

References

On-demand image loading

Accelerates image loading for elastic scaling cold starts and large AI image scenarios. Convert standard images to accelerated images, then install aliyun-acr-acceleration-suite on ACK worker nodes. Pods load image resources on demand and decompress packages online, reducing average container start time by 60% and quadrupling distribution speed.

Container Registry Enterprise Edition instances

China (Hangzhou), China (Shanghai), US (Virginia), and US (Silicon Valley)

Load container images on demand

Feature

Description

Applicable scope

Region

References

Custom domain names

Bind a custom domain name with an SSL certificate to an instance. Access the instance over HTTPS using the custom domain name.

Container Registry Enterprise Edition instances

All regions

Use a custom domain name to access a Container Registry Enterprise Edition instance

Migration from a self-managed Harbor instance to a Container Registry Enterprise Edition instance

Migrate images from a self-managed Harbor instance to an ACR Enterprise Edition instance, reducing the cost of creating and maintaining your own image registry.

Container Registry Enterprise Edition instances

All regions

Migrate self-managed Harbor to Container Registry Enterprise Edition

Feature

Description

Applicable scope

Region

References

Update of global image replication links

Updated global image replication links with automatic replication across major regions worldwide. Achieves a replication success rate above 99%. Configure replication rules by namespace or repository for Enterprise Edition instances. No Internet access required for replication.

Container Registry Enterprise Edition instances

All regions

None

Feature

Description

Applicable scope

Region

References

Image signing

Sign images to prevent man-in-the-middle (MITM) attacks and unauthorized image updates or deployments, ensuring image consistency and security from distribution to deployment. Supports automatic image signing by namespace: every pushed image is signed based on matched signature rules. This ensures that container images are trustworthy.

Container Registry Enterprise Edition instances

All regions

Use container image signing