Bind/Unbind Workspace¶
There are two types of registry spaces: public and private. The images in a public registry space are public, which can be pulled by all platform users, while the images in a private registry space can only be pulled by members of a workspace after the image is bound to that workspace.
- For public images, users can deploy applications by clicking Choose Image button in the Container Management module, selecting images from all public image repositories under Container Registry -> Integrated Registry to deploy the application without any configuration.
- For private images, however, the workspace (tenant) needs to be assigned the private registry space by an administrator before members under the workspace can use them, ensuring the security of private images.
Prerequisites: An external Harbor registry has been created or integrated, and a registry space has been created.
Binding Steps¶
Generally, for private registry spaces, binding to a workspace is helpful to allow members to use the images.
-
Log in to DCE 5.0 as a user with the Admin role, click Container Registry -> Integrated Registry (Admin) from the left navigation bar.
-
Click a registry name.
-
Click Registry Space in the left navigation bar, then click the ┇ on the right of a specific registry space, and select Bind/unbind workspace .
If no workspace is bound, the Workspace column will display
No binding
. -
In the pop-up window, select one or more workspaces, and then click OK .
To unbind a workspace, simply click the x in the selected workspaces list.
-
The prompt message "Bound/Unbound workspace successfully" will be displayed, and the Workspace column will display the bound workspace when you move the cursor over it.
Users under this workspace (tenant) can pull images from this registry space.
FAQs¶
-
When deploying an application in a Kubernetes namespace and clicking the Choose Image button, you are unable to Choose Images from the registry space.
- Check whether the Kubernetes namespace is bound to a workspace (it needs to be bound).
- Check whether the registry space is bound to the workspace where the Kubernetes namespace is located (it needs to be bound).
- Check whether the registry space status is private or public, and switch tabs as necessary.
-
What is the difference between assigning a registry space to a workspace for use and integrating a registry under the workspace?
Platform administrators can centrally manage and assign a registry space to multiple workspaces at once without having to associate each one separately.
Workspace administrators can integrate external image repositories for their members to use as needed, without relying entirely on platform administrators, making it more flexible to use.
Next step: Deploy Applications