Managing Repository
The repository is a logical management unit of images within the registry. Using a repository allows you to set the default security policy for images created below it.
Create a repository
To create a repository, follow the following procedure.
- All services > Container > Container Registry menu is clicked. It moves to the Service Home page of Container Registry.
- Service Home page, click the Repository menu. It moves to the Repository list page.
- Repository list page, click the Create Repository button. Move to the Create Repository page.
- Repository list page top, click the Settings icon to select an existing registry, or click Create new to create a registry.
- Repository creation page where you enter the necessary information and select detailed options.
- Service Information Input area, please enter or select the required information.
Classification MandatoryDetailed Description Registry Required Select the registry name to create the repository - If no registry is created, it can be newly created through the New Creation button
Repository Name Required Name of the repository to be created - Enter 3-30 characters using lowercase English letters, numbers, and special characters (
-) (only lowercase English letters and numbers are allowed at the beginning and end)
Table. Repository Essential Information Input Items - Repository basic policy input area, please enter or select the required information.
Classification MandatoryDetailed Description Image Scan Options Repository-generated image vulnerability automatic scan and scan exclusion policy setting - The default scan policy that can be applied when an image is created in the repository can be set
- If auto-scan is set to use, the vulnerability of the image is automatically checked when the image is pushed, and the vulnerability check cost is charged
- If the scan exclusion policy is set to use, you can specify the inspection target and vulnerability to be excluded from the image scan as follows
- Exclusion setting possible inspection targets
- Language Package inspection exclusion
- Secret inspection exclusion
- Exclusion of vulnerabilities without Fix Version
- Exclusion setting possible vulnerabilities: one of the following levels can be selected
- (None / Unknown / Negligible / Low / Medium / High / Critical) level or lower vulnerabilities are excluded
- Exclusion setting possible inspection targets
Image Pull Limit Option Policy setting for the image Pull limit function used in the repository and the limited value - The default Pull limit policy that can be applied when an image is created in the repository can be set
- If the unscanned image Pull limit is set to use, Pull of unscanned images for vulnerability checking is not allowed
- If the vulnerable image Pull limit policy is set to use, Pull of images with Critical or High level vulnerabilities exceeding the entered value is not allowed. The values that can be entered and selected in this policy are as follows
- Critical: 1(default) ~ 9,999,999
- High: 1(default) ~ 9,999,999
- Excluding vulnerabilities without Fix Version
- If use is selected, vulnerabilities without Fix Version (when there is no patch version for vulnerable packages/libraries) are excluded from the Pull limit policy
Image Lock Status Option You can set a lock to prevent all images in the repository from being deleted or updated - If the image lock status of the repository is Lock, the Lock/Unlock function of individual images in the repository is deactivated
- If the lock status of the repository’s image lock status is changed to Unlock, the Lock/Unlock function of individual images is activated
- New image Push is possible
Image tag deletion Option You can set an automatic image deletion policy stored in the repository - Selecting Use for deletion policy activation applies the image deletion policy
- Selecting Untagged Image automatic deletion and Old Image automatic deletion as Use applies the corresponding image deletion policy
- Enter the automatic deletion period for the deletion policy, and the image will be automatically deleted after the set period has passed since it was first pushed
- For a detailed explanation of image tag deletion, refer to Image Tag Deletion Policy Management
Table. Repository Basic Policy Input Items - Additional Information Input area, please enter or select the required information.
Classification MandatoryDetailed Description Description Selection Repository Description - Enter the repository description
Tag Selection Add Tag - Up to 50 can be added per resource
- Click the Add Tag button and enter or select Key, Value
Table. Input items for adding repository information
- Repository basic policy input items are used to set the default (initial) policy for the Image created in the Repository. (It plays the role of a policy setting template applied when creating an Image)
- This setting can be changed in the detailed view screen after creating the Repository, and the changed policy will be applied to the Image created after changing the Repository basic policy input item. The policy of the Image created before the change will not be changed.
- The default policy set for the Image can be modified in the Image detail screen.
- Summary panel, review the detailed information generated and the estimated billing amount, and click the Complete button.
- Once creation is complete, check the created resource on the Repository list page.
Repository detailed information check
Repository 서비스는 전체 자원 목록과 상세 정보를 확인하고 수정할 수 있습니다. Repository details 페이지에서는 details, tags, work history 탭으로 구성되어 있습니다.
To check the repository details, follow the next procedure.
- All services > Container > Container Registry menu is clicked. It moves to the Service Home page of Container Registry.
- Service Home page, click the Repository menu. It moves to the Repository list page.
- Repository list page, click on the resource (Repository) to check the detailed information. It moves to the Repository details page.
- Repository details page displays the status information and detailed information of the Repository, and consists of details, tags, work history tabs.
Classification Detailed Description Repository Status Expresses the status of the repository - Active: Available status
- Deleting: Being deleted status
- Inactive: Failed to delete and unavailable status (only deletion request is possible)
- Editing: Settings are being modified or sub-resources (images, tags) within the image are being deleted
Usage Guide Repository Usage Guide - CLI-based commands to use images within the repository can be checked
Repository Delete Button to delete the repository Table. Status Information and Additional Functions
Detailed Information
Repository list page where you can check the detailed information of the selected resource and modify the information if necessary.
| Classification | Detailed Description |
|---|---|
| Service | Service Name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform
|
| Resource Name | Resource Name
|
| Resource ID | Unique resource ID in the service |
| Creator | The user who created the repository |
| Creation Time | Repository Creation Time |
| Editor | The user who modified the repository |
| Revision Time | Repository Revision Time |
| Repository Name | The repository name created by the user |
| Image | link to view the list of images stored in the repository |
| Description | The description that the user entered for the created repository |
| Image Scan | Repository-generated image vulnerability automatic scan and scan exclusion policy setting
|
| Image Pull Limit | Policy setting for the image Pull limit function used in the repository and the limited value
|
| Image Lock | Set lock to prevent deletion or update of all images within the repository
|
| Image Tag Deletion | Set the automatic image deletion policy stored in the repository
|
Tag
Repository list page where you can check the tag information of the selected resource, and add, change or delete it.
| Classification | Detailed Description |
|---|---|
| Tag List | Tag list
|
Work History
Repository list page where you can check the work history of the selected resource.
| Classification | Detailed Description |
|---|---|
| work history list | resource change history
|
Delete repository
To delete a Repository, follow the following procedure.
- All services > Container > Container Registry menu is clicked. It moves to the Service Home page of Container Registry.
- Service Home page, click the Repository menu. It moves to the Repository list page.
- Repository list page, click on the resource (Repository) to check the detailed information. It moves to the Repository details page.
- Repository details page, click Delete Repository.
- Repository deletion popup window where you enter the Repository name.
- Repository name has been entered correctly, then the Confirm button will be activated. Click the Confirm button.
- Once the cancellation is complete, check if the resource has been cancelled on the Repository list page.