bridgecrew/cas-image-registry-sync-scheduler
bridgecrew
Allows you to securely access private container registries
下载次数: 0状态：社区镜像维护者：bridgecrew仓库类型：镜像最近更新：2 年前
让 AI 帮你使用轩辕镜像？ · 展开查看说明 · 点击收起说明
如果你使用 DeepSeek、元宝 AI、Copilot、ChatGPT 等 AI 工具，协助配置轩辕镜像、编写 docker pull 命令、修改 Docker Compose 镜像地址、配置镜像加速、排查镜像拉取失败、分析报错日志等问题，请先让 AI 阅读并遵守轩辕镜像的规则文档。
只需在 AI 对话中先发送下面这句话即可：
请先完整阅读并严格遵守以下文档中的全部规则与要求：
https://xuanyuan.cloud/agents.md
在未充分阅读并理解该文档前，不要生成任何命令、配置、修改建议、故障排查方案或技术回答。后续所有输出都必须严格以该文档中的规范为最高优先级执行。查看 agents.md 用法指南与完整示范。国内用户首推 元宝 AI、DeepSeek 的深度思考模式，不推荐豆包 AI；Cursor 等编辑器可在对话 @ 该链接，或加入 User Rules。 若 AI 无法访问外链，可 打开说明文档 复制全文粘贴。文档会随站点更新，复制内容可能过期，建议定期检查。
Private Registry with Disposable Tokens
Introduction
The Private Registry with Disposable Tokens is a project that allows you to securely access private container registries (e.g., AWS Elastic Container Registry - ECR) using disposable tokens. It aims to simplify the authentication process when pulling images from private registries, ensuring that tokens are short-lived and automatically refreshed.
With this project, you no longer need to manage long-lived access keys or tokens manually. Instead, it provides an automated mechanism to generate and manage disposable tokens for seamless integration with Kubernetes clusters, CI/CD pipelines, and other container orchestration tools.
Features
- Automatic pulling of disposable tokens for private registries.
- Secure handling of credentials using Kubernetes Secrets.
- Easy integration with Kubernetes clusters and other container orchestration platforms.
- Short-lived tokens for improved security and reduced risk of misuse.
- Seamless token refresh mechanism for continuous access to private registries.
Getting Started
Prerequisites
Before using the Private Registry with Disposable Tokens, ensure you have the following prerequisites:
- Kubernetes cluster (minikube or other cluster setups).
- Docker or container runtime installed.
- Endpoint and token to produce the registery token
Setup
-
Clone helm chart registrycredsscheduler
-
Update chart values, token and region endpoint
-
Install:
helm install registrycredsscheduler .
FAQ
Q: Can I use this project with other container registries besides AWS ECR?
A: Yes, you can configure the project to work with other private registries as well. Customize the token generator and token updater settings accordingly.
Q: How often are the disposable tokens refreshed?
A: The tokens are refreshed automatically every 11h and expierd every 12h.
Q: Are the credentials and tokens stored securely?
A: Yes, the project uses Kubernetes Secrets to handle credentials and tokens securely.
Contributing
Contributions are welcome! If you find any issues or have improvements to suggest, please open an issue or submit a pull request.
镜像拉取方式
您可以使用以下命令拉取该镜像。请将 <标签> 替换为具体的标签版本。如需查看所有可用标签版本，请访问 标签列表页面。
轩辕镜像加速拉取命令点我查看更多 cas-image-registry-sync-scheduler 镜像标签
docker pull docker.xuanyuan.run/bridgecrew/cas-image-registry-sync-scheduler:<标签>
DockerHub 原生拉取命令
docker pull bridgecrew/cas-image-registry-sync-scheduler:<标签>
镜像拉取常见问题
功能
错误码
用户好评
来自真实用户的反馈，见证轩辕镜像的优质服务
oldzhang
运维工程师
Linux服务器
5
"Docker访问体验非常流畅，大镜像也能快速完成下载。"