Skip to main content

Add OCI Packs Registry

You can add an OCI Pack registry to Palette and use the packs in your cluster profiles. OCI Pack registries are different from the legacy Pack registries. To interact with an OCI Pack registry, you use a tool, such as Oras CLI, to push and pull packs to and from the registry.

tip

For guidance on how to add a custom pack to an OCI pack registry, check out the Deploy a Custom Pack tutorial.

Prerequisites

  • You must have a private OCI type Pack registry that supports basic authentication. Public OCI registries are not supported.

  • Credentials to access the OCI registry. If you are using an AWS ECR registry, you must have the AWS credentials to an IAM user or add a trust relationship to an IAM role so that Palette can access the registry.

  • If the OCI registry is using a self-signed certificate, or a certificate that is not signed by a trusted certificate authority (CA), you will need the certificate to add the registry to Palette.

  • Tenant admin access to Palette.

  • If you are using an AWS ECR registry, ensure you have the following Identity Access Management (IAM) permissions attached to the IAM user or IAM role that Palette will use to access the registry. You can reduce the Resource scope from * to the specific Amazon Resource Name (ARN) of the AWS ECR registry you are using.

    {
    "Version": "2012-10-17",
    "Statement": [
    {
    "Sid": "VisualEditor0",
    "Effect": "Allow",
    "Action": [
    "ecr-public:DescribeRegistries",
    "ecr:DescribeImageReplicationStatus",
    "ecr:ListTagsForResource",
    "ecr:ListImages",
    "ecr:DescribeRepositories",
    "ecr:BatchCheckLayerAvailability",
    "ecr:GetLifecyclePolicy",
    "ecr-public:DescribeImageTags",
    "ecr-public:DescribeImages",
    "ecr:GetRegistryPolicy",
    "ecr-public:GetAuthorizationToken",
    "ecr:DescribeImageScanFindings",
    "ecr:GetLifecyclePolicyPreview",
    "ecr:GetDownloadUrlForLayer",
    "ecr-public:GetRepositoryCatalogData",
    "ecr:DescribeRegistry",
    "ecr:GetAuthorizationToken",
    "ecr-public:GetRepositoryPolicy",
    "ecr-public:DescribeRepositories",
    "ecr:BatchGetImage",
    "ecr:DescribeImages",
    "ecr-public:GetRegistryCatalogData",
    "ecr-public:ListTagsForResource",
    "ecr-public:BatchCheckLayerAvailability",
    "ecr:GetRepositoryPolicy"
    ],
    "Resource": "*"
    }
    ]
    }

    Add OCI Packs Registry

Use the following steps to add an OCI Packs registry to Palette. Select the tab that corresponds to the type of OCI registry you are adding.

  1. Log in to the Palette as a Tenant administrator.

  2. From the left Main Menu select Tenant Settings.

  3. From the Tenant Settings Menu, Select Registries.

  4. Click on the OCI Registries tab.

  5. Click Add New OCI Registry.

  6. Fill out the Name field and select Pack as the provider type.

  7. Select the OCI Authentication Type as Basic.

  8. Provide the registry URL in the Endpoint field.

  9. Specify the Base Content Path. This is the path to the OCI registry where the OCI Packs are stored. For example, if the OCI registry URL is https://registry.example.com and the OCI Packs are stored in the internal repository, the base content path is internal.

  10. Fill out the Username and Password fields with the credentials to access the registry.

  11. If your OCI registry server is using a self-signed certificate or if the server certificate is not signed by a trusted CA, check the Insecure Skip TLS Verify box to skip verifying the x509 certificate, and click Upload file to upload the certificate.

  12. Click Confirm to complete adding the registry.

Validate

Use the following steps to validate that the OCI registry is added to Palette correctly.

  1. Log in to the Palette.

  2. From the left Main Menu, click on Profiles.

  3. Click Add Cluster Profile.

  4. Provide a name and select the type Add-on.

  5. In the following screen, click Add New Pack.

  6. Verify the OCI Pack registry you added is displayed in the filter Registry drop-down Menu.

All the Packs in the OCI registry are displayed below, sorted by category. You can filter the Packs by Type or search for a specific Pack by name.