Change visibility of the Container Registry
Introduced
in GitLab 14.2.
By default, the Container Registry is visible to everyone with access to the project.
You can, however, change the visibility of the Container Registry for a project.
For more information about the permissions that this setting grants to users,
see
Container Registry visibility permissions
.
-
On the top bar, select
Main menu > Projects
.
-
On the left sidebar, select
Settings > General
.
-
Expand the section
Visibility, project features, permissions
.
-
Under
Container Registry
, select an option from the dropdown list:
Everyone With Access
(Default): The Container Registry is visible to everyone with access
to the project. If the project is public, the Container Registry is also public. If the project
is internal or private, the Container Registry is also internal or private.
-
Only Project Members
: The Container Registry is visible only to project members with
Reporter role or higher. This visibility is similar to the behavior of a private project with Container
Registry visibility set to
Everyone With Access
.
-
Select
Save changes
.
Container Registry visibility permissions
The ability to view the Container Registry and pull container images is controlled by the Container Registry’s
visibility permissions. You can change the visibility through the
visibility setting on the UI
or the
API
.
Other permissions
such as updating the Container Registry and pushing or deleting container images are not affected by
this setting. However, disabling the Container Registry disables all Container Registry operations.
|
|
Anonymous
(Everyone on internet)
|
Guest
|
Reporter, Developer, Maintainer, Owner
|
Public project with Container Registry visibility
set to
Everyone With Access
(UI) or
enabled
(API)
|
View Container Registry
and pull images
|
Yes
|
Yes
|
Yes
|
Public project with Container Registry visibility
set to
Only Project Members
(UI) or
private
(API)
|
View Container Registry
and pull images
|
No
|
No
|
Yes
|
Internal project with Container Registry visibility
set to
Everyone With Access
(UI) or
enabled
(API)
|
View Container Registry
and pull images
|
No
|
Yes
|
Yes
|
Internal project with Container Registry visibility
set to
Only Project Members
(UI) or
private
(API)
|
View Container Registry
and pull images
|
No
|
No
|
Yes
|
Private project with Container Registry visibility
set to
Everyone With Access
(UI) or
enabled
(API)
|
View Container Registry
and pull images
|
No
|
No
|
Yes
|
Private project with Container Registry visibility
set to
Only Project Members
(UI) or
private
(API)
|
View Container Registry
and pull images
|
No
|
No
|
Yes
|
Any project with Container Registry
disabled
|
All operations on Container Registry
|
No
|
No
|
No
|
Supported image types
The Container Registry supports
Docker V2
and
Open Container Initiative (OCI)
image formats.
OCI support means that you can host OCI-based image formats in the registry, such as
Helm 3+ chart packages
. There is no distinction between image formats in the GitLab
API
and the UI.
Issue 38047
addresses this distinction, starting with Helm.