Container Registry:Use the domain name of a Personal Edition instance to access an Enterprise Edition instance

Limits

• In one region, the domain name compatibility feature can be enabled only for one Enterprise Edition instance.

• If you use a domain name of a Personal Edition instance to pull images that a third party hosts on the Personal Edition instance, you can pull only public images of the third party.

• If the namespace name in the Enterprise Edition instance is the same as the namespace name in the Personal Edition instance, you cannot pull images from the namespace of the Personal Edition instance. Therefore, do not use a Container Service for Kubernetes (ACK)-specific string, such as acs, in the namespace name of your Enterprise Edition instance. This can prevent failure in access to official ACK container images.

• If you use a public domain name of the Personal Edition instance, you must manually configure to resolve the public domain name of the Personal Edition instance to the public endpoint of the Enterprise Edition instance.

• If you want to use a RAM user to log on to the Enterprise Edition instance and pull images, you must configure access credentials on the Enterprise Edition instance and then grant the permissions on corresponding resources to the RAM user. For more information, see Configure policies for RAM users to access Container Registry.

How it works

Scenarios

Step 1: Enable the domain name compatibility feature for the Enterprise Edition instance

1. Log on to the Container Registry console.

2. In the top navigation bar, select a region.

3. On the Instances page, click the Enterprise Edition instance that you want to manage.

4. In the left-side navigation pane of the management page of the Enterprise Edition instance, choose Repository > Domain.

5. On the Domain page, turn on Support Personal Edition Instance Domains.

   Important

   To use the domain name compatibility feature, you must submit a ticket to apply for adding the Enterprise Edition instance to the whitelist.

6. In the Configure Resolution dialog box, select Confirm to Enable the feature of supporting personal edition instance domains and click Confirm.

   After you enable the feature of supporting Personal Edition instance domains, the private domain name and public domain name of the Personal Edition instance are displayed on the Domain page. For example, if the Personal Edition instance resides in the China (Hangzhou) region, the public domain name of the Personal Edition instance registry.cn-hangzhou.aliyuncs.com and the private domain name of the Personal Edition instance registry-vpc.cn-hangzhou.aliyuncs.com are displayed on the Domain page.

   Important

   Several seconds are required to enable the domain name compatibility feature. During this period, the namespace and network access control features are unavailable.

Step 2: Configure domain name resolution

Before you can use domain names of Personal Edition instances to access the Enterprise Edition instance, you must configure domain name resolution. The operations of configuring domain name resolution vary based on the type of the domain name.

• If you use a private domain name of the Personal Edition instance, Alibaba Cloud DNS PrivateZone automatically resolves the private domain name.

• If you use a public domain name of the Personal Edition instance, you must manually add the CIDR block of the local host to the public endpoint whitelist and configure domain name resolution for the Personal Edition instance. A public domain name of a Personal Edition instance is used in this example.

1. Add the CIDR block of the Enterprise Edition instance to the public endpoint whitelist and obtain the public domain name of the Personal Edition instance.

   1. Log on to the Container Registry console.

   2. In the top navigation bar, select a region.

   3. In the left-side navigation pane, click Instances.

   4. In the left-side navigation pane of the management page of the Enterprise Edition instance, choose Repository > Access Control.

   5. On the Access Control page, click the Internet tab.

      On the Internet tab, find and copy the Domain address.

   6. Turn on Endpoint, and then click Add Internet Whitelist.

   7. In the Add Internet Whitelist dialog box, enter the CIDR block and description of the local host, and then click Confirm.

2. Run the following command to query the IP address of the Personal Edition instance:

   ping <Endpoint of the Personal Edition instance>

   Obtain the IP address of the Personal Edition instance from the command output.

3. Enter the following information for the local host, and then save the information.

   <IP address of the domain name> <Public domain name of the Personal Edition instance>

Step 3: Use a domain name of the Personal Edition instance to access the Enterprise Edition instance

After you enable the domain name compatibility feature, you can use a domain name of the Personal Edition instance to log on to the Enterprise Edition instance and push images to the image repository of the Enterprise Edition instance.

1. On the Domain page, find and copy the public domain name of the Personal Edition instance. The public domain name registry.cn-hangzhou.aliyuncs.com is used in this example.

2. Run the following command on the Docker client to log on to the Enterprise Edition instance.

   docker login registry.cn-hangzhou.aliyuncs.com

   In the command output, enter your account and password. If login succeeded is displayed, you are logged on to the Enterprise Edition instance.

3. Push an image.

   1. Run the following command to tag the image:

      docker tag <Image ID> registry.cn-hangzhou.aliyuncs.com/<Namespace name>/<Image repository name>:<Image tag>

   2. Run the following command to push the image to the Container Registry Enterprise Edition instance:

      docker push registry.cn-hangzhou.aliyuncs.com/<Namespace name>/<Image repository name>:<Image tag>

      In the left-side navigation pane of the management page of the Enterprise Edition instance, choose Repository > Repositories. Click the name of an image repository and select an Image Version. If the image that you pushed is displayed on the Image Version page, access to the Enterprise Edition instance by using the domain name of the Personal Edition instance is successful.