Private registries
Connect Docker Hub, GitHub, GitLab, Quay, Google, Azure or any Docker-compatible registry so Drasken Cloud apps and jobs can pull private images.
To deploy a private image, connect its registry once per project under Public Cloud → Container Registry with Connect registry, using a read-only token. The token is checked against the registry, then stored in the project and never shown again; apps and jobs in that project can then pull images from it.
Which registries can I connect?
| Registry | Address |
|---|---|
| Docker Hub | docker.io |
| GitHub Container Registry | ghcr.io (a token with read:packages) |
| GitLab Container Registry | registry.gitlab.com |
| Quay.io | quay.io |
| Harbor | your registry's address |
| Google Artifact Registry | your registry's address, with a JSON key |
| Azure Container Registry | your registry's address |
| Other registry | any Docker Registry v2 over HTTPS |
Step 1: Create a read-only token
Create a token that can only read (pull) images, in your registry's settings. The console shows a hint for each registry. A read-only token limits what anyone could do with it.
Step 2: Connect the registry
- Open Public Cloud → Container Registry and select Connect registry.
- Choose the registry, give the connection a Name and a Short name (permanent).
- Enter the username and token.
- Optionally, set Token expires: registries don't report expiry, so the console can warn you only if you tell it.
- Save. The console checks the token against the registry.
Step 3: Use it
When you create an app or a job, choose the connection under Registry. Browse and Tags list its repositories and tags.
How do I change or remove a token?
On the connection: Check credential tests it, Rotate token replaces it, Disconnect removes it.
Is there a Drasken Cloud registry?
A registry hosted by Drasken Cloud is coming soon. Until then, use any of the registries above.
Last updated on