Manage images

You can manage images pushed to a repository in the Container Registry service.

View image details

Check the details of images pushed to a repository.

1. Go to KakaoCloud Console > Container Pack > Container Registry.

2. In the Repository menu, select the repository containing the image.

3. In the Image tab, select an image to view its details.

4. Review the information on the image detail page.

   Category	Description
   Image URI	View and copy image URI
   Features	Available actions - [View commands] button: Check authentication and push/pull commands - [Change expiration] button: Modify expiration date
   Details tab	View image details
   Tag tab	View tag information
   Tag history tab	View tag history
   Usage history tab	View image usage history

Modify image

You can edit image details. Note that the image name cannot be changed—only the description and label can be modified.

1. Go to KakaoCloud Console > Container Pack > Container Registry.
2. Click the Repository menu and select a repository. Then go to the Image tab and check the box of the image you want to modify.
3. Click the [More options] icon > Edit.
4. In the Edit image popup, change the desired fields and click [Save].

View image push/pull commands (Docker)

You can check the Docker commands for pushing/pulling images to/from the repository.

1. Go to KakaoCloud Console > Container Pack > Container Registry.
2. Click the Repository menu and select a repository. Then go to the Image tab and select an image.
3. Click the [View commands] button at the top right.
4. Check the commands in the View commands popup.

Change image expiration date

You can change the expiration date of an image.

1. Go to KakaoCloud Console > Container Pack > Container Registry.
2. Click the Repository menu and select a repository. Then go to the Image tab and access the detail page.
3. Click the [Change expiration] button at the top right.
4. Set the expiration in the popup and click [Save].

Scan image (vulnerability analysis)

You can identify software vulnerabilities in an image by performing a scan.

Container Registry uses Trivy's CVE (Common Vulnerabilities and Exposures) database. After a scan completes, a CVE-based report is generated so you can assess the security risks of your image. For more on Trivy, see the Trivy GitHub repository.

info

The image scan type—automatic or manual—is set during repository creation, but can also be modified later. For details, see Edit repository.

Auto image scan

If automatic scan is selected during repository creation, the image will be automatically scanned when pushed.

Manual image scan

If manual scan is selected during repository creation, you can scan the image manually.

1. Go to KakaoCloud Console > Container Pack > Container Registry.
2. Click the Repository menu and select a repository. Then go to the Image tab and select an image.
3. In the Tag tab, expand a tag and click the [Scan] button under Digest.
   • Scans can be run once per day. If already scanned, the button is disabled.

View scan results

View summary and CVE-based results from auto or manual image scans.

1. Go to KakaoCloud Console > Container Pack > Container Registry.
2. Click the Repository menu and select a repository. Then go to the Image tab and select an image.
3. In the Tag tab, expand a tag and click Vulnerabilities under Digest.
4. In the popup, check the Vulnerabilities tab for details.

Delete image

You can delete images that are no longer needed.

1. Go to the KakaoCloud Console > Container Pack > Container Registry menu.
2. In the Repository menu, click a repository, then select the Image tab and check the image you want to delete.
3. Click the [Delete] button located in the middle right.
4. In the Delete image pop-up window, enter the image name and click the [Delete] button.

Push/pull image

Depending on your IAM permissions, you can push or pull your image using the Docker CLI.
To push an image, you must have either the Container Registry admin or project member role. However, users who are not part of the project can still push images if they are granted the repository member role for that specific repository.
To pull an image, any member within the project can do so. Additionally, users who are granted the member or viewer role for the repository can pull the image. If the repository is set to public, any user who knows the URI can pull the image regardless of their permissions.

info

You must create a repository in the registry before pushing images. For more details on creating a repository, refer to Create repository.

Push image

You can push an image to a repository.

1. Authenticate with the registry using the Docker CLI.

   • For more details on registry authentication, refer to Authenticate registry

2. After authentication, tag the image in your local environment using the Docker CLI to prepare for push:

   Tag command

   docker tag {source image} {project name}.{region}.kcr.dev/{repository name}/{image name}:{tag name}

3. Push the tagged image to the repository using the following command:

   Push command example

   docker push {project name}.{region}.kcr.dev/{repository name}/{image name}:{tag name}

caution

Image names must follow the rules below:

• Must be between 4 and 100 characters, using only lowercase letters, digits, hyphens (-), underscores (_), and dots (.), with no spaces
  
• Must start with a lowercase letter or digit, and cannot end with a hyphen (-)
  

Pull image

Authenticated users can pull a specific image from the repository using the following command:

Pull command example

docker pull {project name}.{region}.kcr.dev/{repository name}/{image name}:{tag name}

Manage tag

You can manage image tags in the Container Registry as follows.

View tag details

You can view detailed information about an image tag.

1. Go to the KakaoCloud Console > Container Pack > Container Registry.

2. In the Repository menu, click a repository, then select the image from the Image tab.

3. Click the Tag tab, expand a specific tag, and select the digest.

4. In the Layer, Vulnerability, or Manifest tabs, you can view detailed information for the tag.

   • Layer: View image layer details such as image ID, commands, history, and manifest downloads (V1, V2).
   • Vulnerability: View scan results for vulnerabilities in the image.
   • Manifest: View manifest information for the image.

View digest details

You can view detailed information for an image tag's digest.

1. Go to the KakaoCloud Console > Container Pack > Container Registry.

2. In the Repository menu, click a repository, then select the image from the Image tab.

3. Click the Tag tab and expand a specific tag.

   • Digest: Check the digest information.
   • Status: Check the digest status.
   • Platform: View platform/OS information.
   • Vulnerability: View and run vulnerability scans. For more information, see Scan image (vulnerability analysis)
   • Compressed size: View the compressed size of the digest.

View tag pull command

You can view the pull command for a specific tag.

1. Go to the KakaoCloud Console > Container Pack > Container Registry.
2. In the Repository menu, click a repository, then select the image from the Image tab.
3. Click the Tag tab, then click the [More] icon for the tag you want and select View pull command.
4. Check the information in the View pull command pop-up.

Add tag

You can add a new tag.
If the repository allows tag overwriting, tags with the same name will be overwritten. If overwriting is not allowed, you cannot add a tag with a duplicate name. Tag overwriting settings are configured when the repository is created and can be modified later if needed. For more details, refer to Edit repository.

1. Go to the KakaoCloud Console > Container Pack > Container Registry.
2. In the Repository menu, click a repository, then select the image from the Image tab.
3. Click the Tag tab, then click the [More] icon for the tag and select Add tag.
4. In the Add tag pop-up, enter the tag name and click [Save].

View tag history

You can view the history of actions like tag additions, deletions, and restorations.

1. Go to the KakaoCloud Console > Container Pack > Container Registry.
2. In the Repository menu, click a repository, then select the image from the Image tab.
3. Click the Tag history tab to view the details.

Delete tag

You can delete tags that are no longer needed. When a tag is deleted, other tags that share the same digest will also be deleted. Deleted tags cannot be restored.
For images using schema v2 or higher, a digest (a content-addressable identifier) is included. This digest does not change as long as the image content remains the same.

1. Go to the KakaoCloud Console > Container Pack > Container Registry.
2. In the Repository menu, click a repository, then go to the image details from the Image tab.
3. In the Tag tab, click the [More] menu next to the specific tag and select Delete tag.
4. In the Delete tag pop-up, enter the tag name and click the [Delete] button.