Container Registry Enterprise Edition is an enterprise-grade platform for managing cloud-native application artifacts — container images, Helm charts, and Open Container Initiative (OCI) artifacts. It integrates with Container Service for Kubernetes (ACK) to automatically build and pull images, accelerate image delivery, and reduce application deployment time.
To get started, see Create a Container Registry Enterprise Edition instance and Use a Container Registry Enterprise Edition instance to push and pull images.
Capabilities
| Capability | Details |
|---|---|
| Multi-format artifact support | Container images across Linux, Windows, and ARM architectures; Helm v2 and v3 charts; and other OCI artifacts |
| Security and compliance | Encryption at rest, image vulnerability scanning with multi-perspective reports, network access control, and fine-grained operation audit |
| Cross-region distribution | Automatic cross-region image synchronization; P2P mode for large-scale distribution |
| Automated delivery chains | Observable, traceable, and configurable pipelines that build, scan, and sign artifacts on each source code change; blocking rules halt the pipeline when risks are detected |
Use cases
Global deployment
When R&D operations are in the Chinese mainland but services run across multiple global regions, cross-region image pulls can fail due to network instability. Purchase Container Registry Enterprise Edition in your target regions and configure automatic cross-region synchronization rules. Nodes pull images from the nearest region, and the setup supports cross-region disaster recovery as your business expands.
Large-scale deployment
During traffic spikes or rapid iterations, pulling images fast enough to scale all cluster nodes simultaneously becomes a bottleneck. Container Registry Enterprise Edition offers multiple instance types sized for clusters of different scales — select the type that matches your node count. Multiple acceleration methods, including P2P mode, keep image distribution on schedule during scale-out events.
DevSecOps with containers
If your workloads run on ACK, ACK Serverless, Enterprise Distributed Application Service (EDAS), or Elastic Container Instance, delivery chain security and efficiency are critical. Container Registry Enterprise Edition lets you build delivery chains that automatically build, scan, and sign artifacts on each source code change. If a blocking rule detects a risk, the chain stops before the artifact propagates further. Risk-free artifacts are distributed automatically across global regions, giving you an end-to-end DevSecOps workflow. Based on cloud-native application delivery chains, you can include security into the business delivery process and upgrade DevOps to DevSecOps.
On-premises migration to the cloud
Migrating container images is the first step when moving on-premises workloads to the cloud. Import images directly from Object Storage Service (OSS) buckets into Container Registry Enterprise Edition instances, or use migration tools to move images from other providers — including Google, Azure, and AWS.