aliyun-acr-credential-helper managed edition-Container Compute Service(ACS)-阿里云帮助中心

aliyun-acr-credential-helper is used to pull private images from Container Registry (ACR) to ACS clusters without passwords. This topic describes the features, usage notes, and release notes of the aliyun-acr-credential-helper component.

Supported scenarios

aliyun-acr-credential-helper lets ACS clusters pull private images from ACR instances without storing credentials as Kubernetes Secrets.

Scenario	Authentication method	Constraint
Same-account pull	Built-in cluster identity	Supports ACR Personal Edition and Enterprise Edition
Cross-account pull	RAM Roles for Service Accounts (RRSA) cross-account authorization	RRSA cross-account authorization must be configured

Usage notes

To configure password-free image pulling, see Pull images from Container Registry without using Secrets.

Release notes

June 2024

Version number	Release date	Description	Impact
v24.03.04.1-a567f79-aliyun	2024-06-30	Specific known issues are fixed. The component can be used to pull private images from ACR without passwords across accounts. This component is supported by ACS clusters.	No impact on workloads.

What's next

Pull images from Container Registry without using Secrets