Yandex Container Registry concepts

Container Registry is a service for storing and distributing Docker images.

Container Registry offers a reliable storage solution independent of external locks. Docker images in Container Registry are stored in the same Yandex Cloud data centers as the rest of the cloud infrastructure, ensuring high-speed image processing and zero external traffic costs.

To ensure data security, Container Registry transfers Docker images over HTTPS using SSL certificates managed from Yandex Cloud. Additionally, Container Registry comes with a native vulnerability scanner that enables you to scan Docker images both when they are pushed to the registry and later on a schedule, as well as flexibly manage scan results.

It allows you to manage the following objects:

• Docker image
• Docker volume
• Registry
• Repository

To work with Container Registry, internet access is required.

You can provide internet access in the following ways:

• Assigning a public IP address to a VM.
• By configuring a VM as a NAT instance.
• By setting up a NAT gateway.

Yandex Container Registry supports Docker Registry HTTP API V2, which means you can run the commands available in the Docker CLI.