Functions

Organization Management

Organizations are used to isolate image repositories. With each organization being limited to one company or department, you can manage images in a centralized and efficient manner. Each image must have a unique name within an organization. An IAM user can join different organizations. For details, see Organization Management.

Permissions Management

If you need fine-grained permissions management for SWR, you can use IAM.

With IAM, you can create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own identity credentials for accessing SWR resources.

You can grant only the permissions required for users to perform a specific task.

You can also entrust a Huawei Cloud account or cloud service to perform efficient O&M on SWR resources.

If your Huawei Cloud account does not need individual IAM users, your use of other SWR functions will not be affected.

If you have the SWR Admin or Tenant Administrator permissions, you become an admin user and can grant permissions to other IAM users in SWR.

If you are not an SWR admin user, you can request an SWR admin user to grant you permissions to read, edit, or manage a specific image or images in a specific organization. For details, see Permissions, Granting Permissions for a Specific Image, and Granting Permissions for an Organization.

Long-Term Valid Login Commands

Before pushing or pulling images using a container engine client, you need to connect to SWR. You can use a temporary or long-term command to connect to SWR.

Long-term valid login commands are permanently valid. You should have the programmatic access permissions. If you do not have the permissions, log in to IAM as the administrator and grant yourself the programmatic access permissions.

For details, see Obtaining a Long-Term Login or Image Push/Pull Command.

Image Upload

You can upload images to SWR for full lifecycle management. There are two methods for you to upload images:

• Uploading images using a client

  You can run the Docker command or ctr image push on the server where the container engine client is installed to upload the images to an image repository of SWR.

  If your container engine client is an ECS or CCE node, you can push an image over two types of networks.

  If your client and the image repository are in the same region, you can push an image over the private network.

  If your client and the image repository are in different regions, you can push an image over the public network, and the client must have an EIP bound.

  For details, see Building a Container Image, Image Push FAQs, and Why Does an Image Fail to Be Uploaded on the SWR Console?

• Uploading images using the console

  You can upload images through the SWR console. For details, see Why Does an Image Fail to Be Uploaded on the SWR Console?

Image Download

You can run docker pull or ctr image pull to download images from SWR.

For details, see Pulling an Image and Image Pull FAQs.

Private Image Sharing

After uploading a private image, you can share it with other users and grant them permissions to pull the image.

The user with whom you shared the image can view the image on the the SWR console (My Images > Images from Others). The user can also click the image name to view its details, such as the image tag and image pull command.

For details, see Sharing Images.

Image Trigger

SWR works with CCE and CCI for automatic application updates, which can be achieved when a trigger is added to the images used by the applications.

For details, see Adding a Trigger.

Image Synchronization

You can configure automatic image synchronization to synchronize images to the repositories in other regions after they are uploaded. In this way, the latest images can be automatically synchronized to the repositories in other regions. When an image is updated, the image in the target repository will be also updated. Existing images will not be synchronized.

For details, see Synchronizing an Image to Other Regions and Image Synchronization FAQs.

Image Vulnerability Scan

You can scan private images in SWR to check for vulnerabilities in just a few clicks and follow the suggestions to keep images safe.

Image Center

SWR provides a large number of public images. You can add public images to your favorites and push them to your repository.

For details, see Adding an Image to Favorites and Pulling an Image from Image Center.

Image Accelerator

When you run the docker pull command to pull a public image from the Image Center, it may take a long time or even fail due to timeout. SWR image accelerator brings faster image pull.

For details, see Configuring a Pull Accelerator.