cluz registry
Pull your images with your Clusterz login, and make pull tokens for CI.
| Command | What it does |
|---|---|
cluz registry login | Let docker pull your teams' images with your Clusterz login. |
cluz registry tokens create | Make a pull-only token for one project. |
cluz registry tokens list | List the team's CI pull tokens. |
cluz registry tokens revoke | Revoke a CI pull token. |
cluz images | List the project's images in the registry. |
cluz registry login
cluz images
cluz registry tokens create --project api --expires 30d
cluz registry tokens list
cluz registry tokens revoke <name>cluz registry login installs docker-credential-cluz next to the cluz binary and names it in your Docker config (~/.docker/config.json, or $DOCKER_CONFIG) as the credential helper for the Clusterz registry. Docker then asks it for a short-lived pull login on every pull. Nothing is stored, and other registries are untouched.
Tokens for CI
registry tokens create makes a token that can pull that project's images, and nothing else, until it expires or is revoked. --expires takes a lifetime such as 30d or 720h, a date (2027-01-31), or never, and is 90 days when left out. A lifetime or date must fall within a year. --name names the token in the team.
The secret is shown once. Store it in your CI's secrets and log in with:
docker login <registry> -u <username> --password-stdin