Install Mirantis Secure Registry
Deploy the leading enterprise secure container registry quickly and easily on Kubernetes.
Mirantis Secure Registry duplicates and extends public- and desktop- container image registry functionality to provide a private registry for curating, versioning, and managing important container images on your premises. Automated image scanning, Content Trust, image signing and other Secure Registry features integrate with Mirantis Container Runtime and, optionally, other Mirantis Cloud Native Platform components to ensure (among other things) that:
Developers only use approved and validated base and component images imported from outside sources
Image layers are continually scanned for CVEs
Built images cannot be executed on privileged clusters (e.g., on production) until appropriately promoted
Mirantis Secure Registry is a cornerstone of Mirantis best-practice in creating secure software supply chains.
Install Mirantis Secure Registry via Helm
This tutorial details one simple way of deploying Mirantis Secure Registry for evaluation, using Kubernetes.
Prerequisites
To follow this tutorial, you’ll need:
A Kubernetes cluster with one spare worker node. That node must be appropriately provisioned to host Mirantis Secure Registry (2+ vCPU, 30+GB SSD).
If you do not already have a Kubernetes cluster, you can quickly deploy a Mirantis Kubernetes Engine cluster with multiple worker nodes using Mirantis Launchpad – please see our Mirantis Kubernetes Engine download tutorial for complete instructions. A three-node cluster (one manager, one Kubernetes worker, one additional worker to host Mirantis Secure Registry) is sufficient.
Step 1: Access Helm Chart
Get instructions to install Mirantis Secure Registry through the Helm chart provided by Mirantis.
Next steps
To fully exercise the functionality of Mirantis Secure Registry, you’ll need to initiate a docker workflow to store container images there. We also encourage you to experiment with integrating Secure Registry with select public image repositories, enabling automatic import of latest releases of validated third-party images. All this is detailed in Mirantis Secure Registry documentation.
