Manage Registry

This page explains how to view, configure, and manage an existing CloudRaya Container Registry.

Accessing Registry Management

All registry management actions are performed from the Registry Detail page.

From this page, you can view registry configuration, repositories, image artifacts, and security scan results before performing any changes.

To open the registry detail page:

1. Go to Dashboard → Storage → CloudRaya Container Registry
2. Locate your registry
3. Click View Detail

Registry Detail Overview

The Registry Detail page is divided into several functional areas.

Credential Information

This section displays:

• Registry URL

  The endpoint used for Docker login, push, and pull operations.

• Registry Name

  The logical name of your registry inside CloudRaya.

These values are required when authenticating from Docker, Kubernetes, or CI/CD systems.

Storage Usage

Shows:

• Used storage
• Total allocated storage

The free storage quota is applied once per account, not per registry. If you have more than one registry, only one registry's cost is offset by the free quota.

Additional storage can be added when needed.

📄 See: Resize Registry Storage

Repository List

The Repository section shows all repositories stored inside the registry.

For each repository, you can view:

• Repository name
• Number of artifacts (image tags)
• Last update time

From this list, you can:

• Open repository details
• Delete individual repositories (see note on Tag Immutability below)

Repository & Artifact Details

Selecting a repository opens the Artifact List, which displays, per tag:

• Image tag
• Image size
• Pull time
• Pull count
• Platform
• Vulnerability scan status

Each image tag can be inspected individually.

Vulnerability Scanning

CloudRaya Container Registry supports image vulnerability scanning.

From the Vulnerabilities view, you can:

• See vulnerability counts by severity: Critical, High, Medium, Low, and Unknown
• Review a list of CVE identifiers
• Inspect the affected package, version, and severity for each entry

This helps identify security risks before deploying images to production.

Vulnerability data only populates when Scan on Push is enabled in Registry Settings. If it's disabled, the Vulnerabilities view shows no data until you enable it.

Vulnerability scanning is informational and should be combined with your internal security processes.

Acting on Vulnerability Scan Results

Scan results help you decide whether an image is safe to use. CloudRaya won't stop you from pushing or deploying an image that has known vulnerabilities, so it's worth checking the results yourself.

Here's a simple way to use them:

1. Check the severity breakdown to see how risky the image is before deploying it to production
2. Write down the CVE ID, affected package, and version for any Critical or High findings
3. Update the base image or the affected package, then push and scan again

This helps you catch and fix security issues before they reach production.

Registry Settings

From the Setting Config menu, you can configure registry-wide behavior.

Available Settings

• Tag Immutability
  • Prevents overwriting existing image tags
  • Also prevents the repository from being deleted while enabled
  • Recommended for production environments
• Scan on Push
  • Automatically scans images when pushed
  • Ensures early vulnerability visibility

Changes take effect immediately after saving.

Push Command Helper

The View Push Command action provides ready-to-use Docker commands, including:

1. Docker login command
2. Image build example
3. Image tagging format
4. Docker push command

This is intended to reduce configuration errors and speed up onboarding.

📄 See: Push & Pull Images

Credential Management

Change Registry Password

You can change the registry password at any time from the Change Password button on the Registry Detail page.

When the password is changed:

• Existing Docker logins will stop working
• CI/CD pipelines must be updated
• Kubernetes imagePullSecrets must be updated

Password rotation is recommended as a security best practice.

📄 See: Change Registry Password

Resize Registry Storage

If storage usage approaches the allocated limit, you can upgrade storage.

Important notes:

• Storage changes are applied in 10 GB increments
• Storage can be increased or decreased from the same Upgrade Storage dialog
• Billing updates automatically after the change

📄 See: Resize Registry Storage

Delete Registry

Deleting a registry permanently removes:

• The registry itself
• All repositories and images
• All vulnerability scan data
• All associated credentials

🚨 This action is irreversible.

Deletion requires explicit confirmation to prevent accidental data loss.

📄 See: Delete Registry

Recommended Management Flow

For production environments, CloudRaya recommends:

1. Enable tag immutability
2. Enable scan on push
3. Monitor storage usage regularly
4. Rotate registry passwords periodically
5. Integrate registry access with Kubernetes securely
6. Delete unused repositories to maintain hygiene

Related Guides

📄 Resize Registry Storage

📄 Change Registry Password

📄 Delete Registry

📄 Push & Pull Images

📄 Access & Authentication

📄 Integrate Container Registry with Kubernetes

📄 Container Registry Best Practices