Docs

Container Registry

Instance management

Initializing instances

When you log in to a CR instance for the first time, you can follow the interactive wizard on the page to complete the initial setup of the instance. This facilitates your use of CR in subsequent business scenarios. The initial setup includes network configuration, key setup, and image push/pull address command configuration.

tip

This operation applies only to Standard Edition instances.

Prerequisites

You have created a Standard instance. For instructions, see Creating Standard instances or Creating proxy cache registries.

Procedure

Select the target region in the top navigation bar.

In the left navigation pane, click Instance list. Select an entry point depending on your instance type:

Standard instance: Click Standard instance. Find the target instance and click Enter instance.

Proxy repository: Click Proxy cache. Click the target domain name to enter the instance details page.

Configure network information, then click Next.

tip

Enabling public network access may take 5 to 10 minutes. You can later check the status on the Access control page.

Parameter	Description
Intranet access	Associated project: Associate the target project. After association, members of the project will obtain corresponding permissions for the Container Registry based on project authorizations. For details, see Project management and Managing project authorization. Private network: Select the VPC that the CR instance can access. After you enable intranet access, push and pull speeds can be effectively improved without public network bandwidth consumption. Subnet: Select the subnet that the CR instance can access.
Public NAT for internet endpoint	tip Enabling public network access takes 5–10 minutes. You can proceed with subsequent steps first and verify the status on the access control page after initialization. After public network access is enabled, all IP addresses are denied by default. Configure an IP allowlist in time. To allow access from all networks, add the allow rule 0.0.0.0/0. After public network access is enabled, resources in public network environments can directly push and pull images in standard instances, and pull images from proxy cache registry instances. Access entry: Whether to enable the public network access entry. You can click to enable it. Allowlist address: Enable public network access and add a public network access allowlist as needed. Deny access from all addresses: Leave the field empty. Allow access from specific addresses: Enter the IP addresses or CIDR blocks that you want to allow. Separate multiple IP addresses or CIDR blocks with line breaks or commas (,). When you enter multiple entries, the IP ranges must not overlap. Allow access from all IPv4 addresses: Enter 0.0.0.0/0.
Current instance network connectivity	Click Get it now to display the current status of intranet and public network access.

Set the instance password, then click Next.

Parameter	Description
Set CR password	A fixed CR password can be configured, which is suitable for O&M personnel to manage the repository in the long term. You can click the switch on the right to skip this configuration and log in using the temporary access instruction.
Get temporary access instruction	Click Click to obtain and copy the temporary access instruction to obtain the temporary login password for the CR instance, which can be used for temporary access. The password is valid for 1 hour.

Select the namespace where the instance resides. Obtain the instructions for logging in to the CR instance and pushing or pulling images. For methods to create a namespace, see Namespace management.

Click Complete to finish instance initialization.

Last updated: 2026.09.23 14:37:21