Configure container registry

From ArcGIS Enterprise Manager, you can view and update the registry host, repository prefix, and authentication method specified for the container registry during deployment.

Caution:

If you're specifying a container registry account, the account should have a minimum level of privileges associated with it, for example, only those to download container images. By default, Kubernetes stores and accesses this account's unencrypted credentials as a secret. It is recommended that you do not specify an account that has privileges to push changes, edit metadata, or administer the container registry.

Update registry authentication

To change the authentication method or credentials used to access the registry without changing the registry itself, complete the following steps:

1. Sign in to ArcGIS Enterprise Manager as an administrator.
2. Click Settings > Container registry.
3. Click Update credentials.
4. If you are updating the authentication type, choose one of the following options:
   • Integrated with cloud provider—Container registry authentication is integrated with your cloud provider.
   • User credentials—Provide the username and password for an account in the specified container registry that stores permissions to pull from the registry.
5. If you are updating the container registry account credentials, provide the new username and password.
6. Click Save.

Update the registry host

You can change the location ArcGIS Enterprise on Kubernetes uses for pulling container images by updating the registry host. Updating the registry host also optionally allows you to change the authentication method at the same time. This update will take some time to complete and you will not be able to make changes to your organization while the update is in progress. Enterprise Manager displays the progress of the update, but you cannot access other capabilities of Enterprise Manager during the update. To minimize operational impacts, it is recommended that you perform the update during a scheduled maintenance period.

Before updating the registry host, it is strongly recommended that you create a full backup of your ArcGIS Enterprise organization. If the registry host update fails, ArcGIS Enterprise will attempt to automatically roll back to using the previous registry host. If this roll back fails, use the backup in the out-of-place restore process to restore your organization to its previous state while preventing data loss.

Note:

Ensure that both the original and new registry hosts remain accessible until the update process completes.

To update the registry host, complete the following steps:

1. Sign in to ArcGIS Enterprise Manager as an administrator.
2. Click Settings > Container registry.
3. Click Update registry.
4. Confirm that the last backup created is recent enough to meet your requirements for restoring your organization using that backup, and click Continue.
5. If you need to create a new backup, click Go to backups to exit the update process.
6. Specify the Registry host and Repository prefix values for the new registry.
7. Choose an option for Authentication type as follows:
   • Integrated with cloud provider—Container registry authentication is integrated with your cloud provider.
   • User credentials—Provide the username and password for an account in the specified container registry that stores permissions to pull from the registry.
8. Click Update.