Skip to content

What is a Container Registry

Kangaroo (container registry) is a cloud native image hosting service that supports deploying registry instances to any cloud native infrastructure and integrating existing Harbor Registry, Docker Registry, and JFrog Registry. By binding private registry spaces to workspaces (tenants), image assets can be allocated in isolation to one or more workspaces, or a registry space can be exposed to all Kubernetes namespaces in a cluster; together with the "Select Image" capability of Container Management, applications can be deployed quickly.

Product Logic Architecture

Container Registry Logical Architecture

The architecture consists of a control plane and a data plane:

Plane Role/Component Responsibility In the diagram
Control plane Workspace Uses Registry Space, Integrated Registry, Image Scanning, and Image Reclaim Blue group
Control plane Admin Creates managed Harbor, integrates registries, configures image synchronization, and binds registry spaces to workspaces Orange group
Control plane Registry instance management Centrally manages registry instances across data centers and delivers registry management and permission control policies to local and remote clusters Orange dashed line
Data plane Clusters Pull image / chart from the registry in their data center and deploy applications Gray solid line
Data plane Sync Images Keeps artifacts consistent between the registries in both data centers Gray solid line

Key Capabilities

The container registry is a shared image hosting module across product lines, covering the full chain of registry instances, image assets, and application delivery:

  • Full Lifecycle Management

    Provides full lifecycle management of the container registry through managed Harbor, including creating, editing, and deleting registry instances, with unified management of multiple instances.

    ▶ Managed Harbor

  • Integrated External Registries

    Allows administrators to integrate external registries and allocate registry spaces to one or more workspaces (tenants); workspaces can also integrate external container registries independently.

    ▶ Integrated Registry (Admin)

  • Image Scanning

    Supports image scanning to identify security risks in images; image security scanning can also be enabled in offline environments.

    ▶ Image Scanning

  • Convenient Application Deployment

    Works with the Container Management module to select images quickly through the "Select Image" feature and complete application deployment.

    ▶ Learn about Container Management

  • Image Synchronization

    Supports both manual and scheduled synchronization: images can be synchronized to a target repository, or from a target repository to the local repository.

    ▶ Configure Image Synchronization

  • Image Reclaim

    Supports image retention rules that move matching images to the recycle bin manually or on a schedule to control repository capacity.

    ▶ Image Reclaim

Next Steps

Choose the documentation to read next based on your role or task:

Download Center Learn about d.run Token Factory Learn about d.run AI OS View the Container Registry User Manual (PDF)

Comments