diff options
| author | Evan Read <eread@gitlab.com> | 2018-11-07 23:03:12 +0000 |
|---|---|---|
| committer | Evan Read <eread@gitlab.com> | 2018-11-07 23:03:12 +0000 |
| commit | daa6fe7f0a80c75fdbe03abddbc058572c1a5efc (patch) | |
| tree | 42b8309b018aafa0d2a8227b4f437b5694b21a43 /doc | |
| parent | 52c9c0d60f5752308409d97f927c20cd89986535 (diff) | |
| parent | e64b0116cfae2a6bb6eee0c69b569e94f0b81600 (diff) | |
| download | gitlab-ce-daa6fe7f0a80c75fdbe03abddbc058572c1a5efc.tar.gz | |
Merge branch 'docs/add-warning-for-registry-configuration' into 'master'
Emphasis the importance of auth registry
See merge request gitlab-org/gitlab-ce!22843
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/administration/container_registry.md | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/doc/administration/container_registry.md b/doc/administration/container_registry.md index 890b780fe80..cfe7b0e05e3 100644 --- a/doc/administration/container_registry.md +++ b/doc/administration/container_registry.md @@ -71,7 +71,7 @@ A Registry init file is not shipped with GitLab if you install it from source. Hence, [restarting GitLab][restart gitlab] will not restart the Registry should you modify its settings. Read the upstream documentation on how to achieve that. -At the absolute minimum, make sure your [Registry configuration][registry-auth] +At the **absolute** minimum, make sure your [Registry configuration][registry-auth] has `container_registry` as the service and `https://gitlab.example.com/jwt/auth` as the realm: @@ -84,6 +84,9 @@ auth: rootcertbundle: /root/certs/certbundle ``` +CAUTION: **Caution:** +If `auth` is not set up, users will be able to pull docker images without authentication. + ## Container Registry domain configuration There are two ways you can configure the Registry's external domain. |