Creating a registry

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder used by default is the one specified when creating the CLI profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also specify a different folder for any command using --folder-name or --folder-id. If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.

1. Make sure the folder does not contain a registry yet:

   yc container registry list
   

   Result:

   +----+------+-----------+
   | ID | NAME | FOLDER ID |
   +----+------+-----------+
   +----+------+-----------+
   

   If the folder already contains a registry, see Updating a registry for info on how you can update it.

2. Create a registry:

   • With automated vulnerability scanning:

     yc container registry create --name my-reg --secure
     

     Warning

     Automatic Docker image scanning makes your registry more secure. The default vulnerability scan settings are consistent with the Yandex Cloud cloud infrastructure security standard.

   • Without automated vulnerability scanning:

     yc container registry create --name my-reg
     

   Result:

   done
   id: crpd50616s9a********
   folder_id: b1g88tflru0e********
   name: my-reg
   status: ACTIVE
   created_at: "2019-01-09T14:34:06.601Z"
   

   Follow these registry naming requirements:

   • Length: between 3 and 63 characters.
   • It can only contain lowercase Latin letters, numbers, and hyphens.
   • It must start with a letter and cannot end with a hyphen.

   The --name parameter is optional. You can create a registry without a name and use its ID to access it. The name field is user-defined. It is used when listing resources in the Yandex Cloud CLI and is not used in the Docker CLI.

3. Make sure the registry has been created:

   yc container registry list
   

   Result:

   +----------------------+--------+----------------------+
   |          ID          |  NAME  |      FOLDER ID       |
   +----------------------+--------+----------------------+
   | crpd50616s9a******** | my-reg | b1g88tflru0e******** |
   +----------------------+--------+----------------------+
   

If you do not have Terraform yet, install it and configure the Yandex Cloud provider.

To manage infrastructure using Terraform under a service account or user accounts (a Yandex account, a federated account, or a local user), authenticate using the appropriate method.

1. Include the parameters of the registry you want to create in the configuration file, e.g., a file named example.tf in the ~/cloud-terraform directory:

   resource "yandex_container_registry" "my-reg" {
     name = "my-registry"
     folder_id = "<folder_ID>"
     labels = {
       my-label = "my-label-value"
     }
   }
   

   Where:

   • name: Registry name.
   • folder_id: Folder ID.
   • labels: Labels used.

   For more information about resources you can create with Terraform, see this provider guide.

2. Make sure the configuration file is correct.

   1. In the terminal, navigate to the directory with your configuration file:

      cd /Users/<username>/cloud-terraform
      

   2. Run a check using this command:

      terraform plan
      

      Result:

      Refreshing Terraform state in-memory prior to plan...
      The refreshed state will be used to calculate this plan, but will not be
      persisted to local or remote state storage.
      ...
      Note: You did not specify an "-out" parameter to save this plan, so Terraform
      cannot guarantee that exactly these actions will be performed if
      "terraform apply" is subsequently run.
      

3. Create a registry.

   1. Run this command:

      terraform apply
      

      Result:

      An execution plan has been generated and is shown below.
      Resource actions are indicated with the following symbols:
        + create
      ...
        Terraform will perform the actions described above.
        Only 'yes' will be accepted to approve.
      
        Enter a value:
      

   2. Confirm creating the registry by typing yes and pressing Enter:

      Enter a value: yes
      

      Result:

      yandex_container_registry.default: Creating...
      yandex_container_registry.default: Creation complete after 4s [id=crpuljdfqoj3********]
      
      Apply complete! Resources: 1 added, 0 changed, 0 destroyed.
      

      This will create a registry named my-registry in the folder.

   3. Check the resources and their settings in the management console.

To create a registry, use the create method for the Registry resource.