Container Registry

Easy Storage, Management, and Sharing of Container Images

Container Registry offers a cloud registry for convenient storage, management, and sharing of container images and OCI(Open Container Initiative) standard artifacts. Image management and deployment are available anytime anywhere on Samsung Cloud Platform.

Overview

  • Simple Registry Management and Image Deployment

    Container Registry for projects can easily be created on Samsung Cloud Platform. Images for deployment can be pulled from the Registry using the standard Docker CLI(Command Line Interface) to streamline development and service deployment flows.

  • Efficient Container Image Storage

    Through integration with Object Storage, the storage capacity of a registry can be configured as unlimited, and container images can be stored and pulled, allowing for efficient management. Docker Registry V2 API spec is also supported for user convenience.

  • More Secure Registry Management

    Images can be securely stored and used with Container Registry service. The service encrypts and stores the images in Object Storage and sends them via HTTPS. Access authority is set by repository according to the IAM resource-based policy of Samsung Cloud Platform and allows image usage as per the set authority.

  • Container Image Vulnerability Assessment

    Container Registry offers assessment on security vulnerabilities of stored container images. Uses may simply select and scan an image to find the analysis and identify/remove vulnerabilities based on the result.

01

04

Service Architecture

  1. Use Case ↔ Image Push / Image Pull ↔ Container Registry ↔ Samsung Cloud Platform
    User Case
    Developer
    Admin
    CI/CD
    K8s Cluster
  2. Container Registry
    User Interface
    UI
    API
    CLI
    Authentication / Authority features
    Authentication
    Authority
    Container Image Management
    Registry Creation/ Deletion/ Mgmt.
    Repository Management
    Image Tag Management
    Vulnerability Assessment
    Image Policy Management
    Container Image Storage
    Container Image
    Helm Chart
    OCI Artifact
  3. Container Registry ← User Authentication → IDP (Identity Provider)
  4. Container Registry ← Registry/Repository, Authority Mgmt. → IAM
  5. Container Registry ← Image/Chart/Artifact, Storage → Object Storage
  6. Container Registry ← Event Monitoring → Cloud Monitoring
  7. Container Registry ← Event Logging → Logging/Audit
    • Samsung Cloud Platform: IDP, IAM, Objec Storage, Cloud Monitoring, Logging/Audit

Key Features

  • Registry management

    - Create, delete, and manage registry
    - Registry access control management

  • Image management

    - Tag management : Push, pull, view and delete images
    - Repository management : View and delete repository, set security policy

  • Vulnerability assessment of images

    - Provide Common Vulnerability Exposure(CVE)-based vulnerability scanning and results :
    Container image, package, secret, language package

  • Collaboration and access control

    - Authority management on IAM(Identity and Access Management)-based registry and repository
    - Usage monitoring
    - Logging : registry, repository, and image tagged events

Pricing

    • Billing
    • Registry service : Stored data amount X Used hours (per hour)
      ※ As per connected Object Storage bucket
    • Image scanning : Charge by number of scans
Let’s talk

Whether you’re looking for a specific business solution or just need some questions answered, we’re here to help

Share