forked from docs/doc-exports
SWR UMN 20250710 version
Reviewed-by: Eotvos, Oliver <oliver.eotvos@t-systems.com> Co-authored-by: qiujiandong1 <qiujiandong1@huawei.com> Co-committed-by: qiujiandong1 <qiujiandong1@huawei.com>
This commit is contained in:
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
25
docs/swr/umn/cts_02_0002.html
Normal file
25
docs/swr/umn/cts_02_0002.html
Normal file
@ -0,0 +1,25 @@
|
||||
<a name="cts_02_0002"></a><a name="cts_02_0002"></a>
|
||||
|
||||
<h1 class="topictitle1">Viewing CTS Traces in the Trace List</h1>
|
||||
<div id="body8662426"><div class="section" id="cts_02_0002__en-us_topic_0179639644_section5470822195238"><h4 class="sectiontitle">Scenarios</h4><p id="cts_02_0002__en-us_topic_0179639644_p333055219577">After you enable Cloud Trace Service (CTS) and the management tracker is created, CTS starts recording operations on cloud resources. CTS stores operation records (traces) generated in the last seven days.</p>
|
||||
</div>
|
||||
<div class="section" id="cts_02_0002__en-us_topic_0179639644_section19271975203"><h4 class="sectiontitle">Viewing Real-Time Traces in the Trace List</h4><ol id="cts_02_0002__en-us_topic_0179639644_ol4845175152710"><li id="cts_02_0002__en-us_topic_0179639644_li791871844313">Log in to the management console.</li><li id="cts_02_0002__en-us_topic_0179639644_li79188188435">Click <span><img id="cts_02_0002__en-us_topic_0179639644_image2091881811436" src="en-us_image_0000001696838310.png"></span> in the upper left corner and choose <strong id="cts_02_0002__en-us_topic_0179639644_b785314592818">Management & Deployment</strong> > <strong id="cts_02_0002__en-us_topic_0179639644_b031292616283">Cloud Trace Service</strong>. The CTS console is displayed.</li><li id="cts_02_0002__en-us_topic_0179639644_li591831894316">Choose <strong id="cts_02_0002__en-us_topic_0179639644_b09819412220">Trace List</strong> in the navigation pane on the left.</li><li id="cts_02_0002__en-us_topic_0179639644_li6936134194312">Set filters to search for your desired traces, as shown in <a href="#cts_02_0002__en-us_topic_0179639644_fig139361441134311">Figure 1</a>. The following filters are available.<div class="fignone" id="cts_02_0002__en-us_topic_0179639644_fig139361441134311"><a name="cts_02_0002__en-us_topic_0179639644_fig139361441134311"></a><a name="en-us_topic_0179639644_fig139361441134311"></a><span class="figcap"><b>Figure 1 </b>Filters</span><br><span><img id="cts_02_0002__en-us_topic_0179639644_image14936144112433" src="en-us_image_0000001744598325.png"></span></div>
|
||||
<div class="p" id="cts_02_0002__en-us_topic_0179639644_p15936134119435"><ul class="subitemlist" id="cts_02_0002__en-us_topic_0179639644_ul20936164174314"><li id="cts_02_0002__en-us_topic_0179639644_li99361417432"><strong id="cts_02_0002__en-us_topic_0179639644_b179671714141513">Trace Type</strong>, <strong id="cts_02_0002__en-us_topic_0179639644_b179671014191515">Trace Source</strong>, <strong id="cts_02_0002__en-us_topic_0179639644_b4968714141517">Resource Type</strong>, and <strong id="cts_02_0002__en-us_topic_0179639644_b14968101411516">Search By</strong>: Select a filter from the drop-down list.<ul id="cts_02_0002__en-us_topic_0179639644_ul158893433010"><li id="cts_02_0002__en-us_topic_0179639644_li12760183118301">If you select <strong id="cts_02_0002__en-us_topic_0179639644_b389315891511">Resource ID</strong> for <strong id="cts_02_0002__en-us_topic_0179639644_b3893858131515">Search By</strong>, specify a resource ID.</li><li id="cts_02_0002__en-us_topic_0179639644_li12760203115305">If you select <strong id="cts_02_0002__en-us_topic_0179639644_b8997941831">Trace name</strong> for <strong id="cts_02_0002__en-us_topic_0179639644_b199981541317">Search By</strong>, specify a trace name.</li><li id="cts_02_0002__en-us_topic_0179639644_li197601031193019">If you select <strong id="cts_02_0002__en-us_topic_0179639644_b196612501258">Resource name</strong> for <strong id="cts_02_0002__en-us_topic_0179639644_b177275015252">Search By</strong>, specify a resource name.</li></ul>
|
||||
</li><li id="cts_02_0002__en-us_topic_0179639644_li15936204184311"><strong id="cts_02_0002__en-us_topic_0179639644_b98151395276">Operator</strong>: Select a user. </li><li id="cts_02_0002__en-us_topic_0179639644_li6936184119437"><strong id="cts_02_0002__en-us_topic_0179639644_b6981161112286">Trace Status</strong>: Select <strong id="cts_02_0002__en-us_topic_0179639644_b1298716111281">All trace statuses</strong>, <strong id="cts_02_0002__en-us_topic_0179639644_b7987181115281">Normal</strong>, <strong id="cts_02_0002__en-us_topic_0179639644_b2988181112810">Warning</strong>, or <strong id="cts_02_0002__en-us_topic_0179639644_b99881511132820">Incident</strong>.</li><li id="cts_02_0002__en-us_topic_0179639644_li1993654144315">Time range: Select <strong id="cts_02_0002__en-us_topic_0179639644_b1840823133614">Last 1 hour</strong>, <strong id="cts_02_0002__en-us_topic_0179639644_b6408123118362">Last 1 day</strong>, or <strong id="cts_02_0002__en-us_topic_0179639644_b12408231123610">Last 1 week</strong>, or specify a custom time range within the last seven days.</li></ul>
|
||||
</div>
|
||||
</li><li class="subitemlist" id="cts_02_0002__en-us_topic_0179639644_li094111715448">Click <strong id="cts_02_0002__en-us_topic_0179639644_b55732514186">Query</strong>.</li><li id="cts_02_0002__en-us_topic_0179639644_li29410170448">On the <strong id="cts_02_0002__en-us_topic_0179639644_b176911834143214">Trace List</strong> page, you can also export and refresh the trace list.<ul id="cts_02_0002__en-us_topic_0179639644_ul119414175448"><li id="cts_02_0002__en-us_topic_0179639644_li12946170445">Click <strong id="cts_02_0002__en-us_topic_0179639644_b8907168171714">Export</strong> to export all traces in the query result as a CSV file. The file can contain up to 5,000 records.</li><li id="cts_02_0002__en-us_topic_0179639644_li394151717445">Click <span><img id="cts_02_0002__en-us_topic_0179639644_image109421716440" src="en-us_image_0000001696678850.png"></span> to view the latest information about traces.</li></ul>
|
||||
</li><li id="cts_02_0002__en-us_topic_0179639644_li169491744418">Click <span><img id="cts_02_0002__en-us_topic_0179639644_image9947176447" src="en-us_image_0000001744678489.jpg"></span> on the left of a trace to expand its details.<p id="cts_02_0002__en-us_topic_0179639644_p1294101714446"></p>
|
||||
<p id="cts_02_0002__en-us_topic_0179639644_p1694171715446"><span><img id="cts_02_0002__en-us_topic_0179639644_image1767234653119" src="en-us_image_0000001942942816.png"></span></p>
|
||||
<p id="cts_02_0002__en-us_topic_0179639644_p145491156142711"></p>
|
||||
<p id="cts_02_0002__en-us_topic_0179639644_p1352018181294"></p>
|
||||
<p id="cts_02_0002__en-us_topic_0179639644_p109481744411"></p>
|
||||
</li><li id="cts_02_0002__en-us_topic_0179639644_li1094161784410">Click <strong id="cts_02_0002__en-us_topic_0179639644_b139145611337">View Trace</strong> in the <strong id="cts_02_0002__en-us_topic_0179639644_b1591756103313">Operation</strong> column. The trace details are displayed.<p id="cts_02_0002__en-us_topic_0179639644_p1695161714447"><span><img id="cts_02_0002__en-us_topic_0179639644_image1904172011220" src="en-us_image_0000001758618249.png"></span></p>
|
||||
</li><li id="cts_02_0002__en-us_topic_0179639644_li129561719446">For details about key fields in the trace structure, see <a href="https://docs.otc.t-systems.com/cloud-trace-service/umn/user_guide/trace_references/trace_structure.html#cts-03-0010" target="_blank" rel="noopener noreferrer">Trace Structure</a> and <a href="https://docs.otc.t-systems.com/cloud-trace-service/umn/user_guide/trace_references/example_traces.html" target="_blank" rel="noopener noreferrer">Example Traces</a> in the <em id="cts_02_0002__en-us_topic_0179639644_i1765453563620">CTS User Guide</em>.</li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="swr_01_0083.html">Auditing</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
BIN
docs/swr/umn/en-us_image_0000001696678850.png
Normal file
BIN
docs/swr/umn/en-us_image_0000001696678850.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 565 B |
BIN
docs/swr/umn/en-us_image_0000001696838310.png
Normal file
BIN
docs/swr/umn/en-us_image_0000001696838310.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 180 B |
BIN
docs/swr/umn/en-us_image_0000001744598325.png
Normal file
BIN
docs/swr/umn/en-us_image_0000001744598325.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 32 KiB |
BIN
docs/swr/umn/en-us_image_0000001744678489.jpg
Normal file
BIN
docs/swr/umn/en-us_image_0000001744678489.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 744 B |
BIN
docs/swr/umn/en-us_image_0000001758618249.png
Normal file
BIN
docs/swr/umn/en-us_image_0000001758618249.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 19 KiB |
BIN
docs/swr/umn/en-us_image_0000001942942816.png
Normal file
BIN
docs/swr/umn/en-us_image_0000001942942816.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 38 KiB |
@ -24,7 +24,7 @@ sudo systemctl restart docker</pre>
|
||||
<pre class="screen" id="swr_01_0006__screen638115311124">FROM nginx
|
||||
RUN echo '<h1>Hello,SWR!</h1>' > /usr/share/nginx/html/index.html</pre>
|
||||
<p id="swr_01_0006__p18409771">In the preceding instructions:</p>
|
||||
<ul id="swr_01_0006__ul31470215"><li id="swr_01_0006__li14796483"><strong id="swr_01_0006__b1154218154309">FROM</strong>: creates a layer from the base image. A valid Dockerfile must start with a <strong id="swr_01_0006__b10543915173014">FROM</strong> instruction. In this example, the <strong id="swr_01_0006__b175431715103012">Nginx</strong> image is used as the base image.</li><li id="swr_01_0006__li66059488"><strong id="swr_01_0006__b16171021123015">RUN</strong>: executes a command to create a new layer. One of its syntax forms is RUN <command>. In this example, the <strong id="swr_01_0006__b219421103020">echo</strong> command is executed to display <span class="uicontrol" id="swr_01_0006__uicontrol1220182183016"><b>Hello, SWR!</b></span></li></ul>
|
||||
<ul id="swr_01_0006__ul31470215"><li id="swr_01_0006__li14796483"><strong id="swr_01_0006__b1154218154309">FROM</strong>: creates a layer from the base image. A valid Dockerfile must start with a <strong id="swr_01_0006__b10543915173014">FROM</strong> instruction. In this example, the <strong id="swr_01_0006__b175431715103012">Nginx</strong> image is used as the base image.</li><li id="swr_01_0006__li66059488"><strong id="swr_01_0006__b16171021123015">RUN</strong>: executes a command to create a layer. One of its syntax forms is RUN <command>. In this example, the <strong id="swr_01_0006__b219421103020">echo</strong> command is executed to display <span class="uicontrol" id="swr_01_0006__uicontrol1220182183016"><b>Hello, SWR!</b></span></li></ul>
|
||||
<p id="swr_01_0006__p5718163414418">Save the changes and exit.</p>
|
||||
</p></li><li id="swr_01_0006__li13537715151216"><span>Run <strong id="swr_01_0006__b1720474218338">docker build</strong> [<em id="swr_01_0006__i13232142254917">option</em>] <<em id="swr_01_0006__i17956127184914">context path</em>> to build an image.</span><p><p id="swr_01_0006__p136952232010"><strong id="swr_01_0006__b38309612013">docker build -t nginx:v1 .</strong></p>
|
||||
<ul id="swr_01_0006__ul1058016118434"><li id="swr_01_0006__li458020174318"><strong id="swr_01_0006__b12302115204">-t nginx:v1</strong>: specifies the image name and tag.</li><li id="swr_01_0006__li832914364312"><strong id="swr_01_0006__b21841314142018">.</strong>: indicates the path where the Dockerfile is located. All contents in this path are packed and sent to the Docker to build an image.</li></ul>
|
||||
|
||||
@ -3,7 +3,7 @@
|
||||
<h1 class="topictitle1">Uploading an Image Through a Container Engine Client</h1>
|
||||
<div id="body1557200952787"><div class="section" id="swr_01_0011__section582103934115"><h4 class="sectiontitle">Scenario</h4><p id="swr_01_0011__p1444313599539">You can run <strong id="swr_01_0011__b280524118434">docker push</strong> (Docker) or <strong id="swr_01_0011__b13805041144319">ctr push</strong> (containerd) on the server where the container engine client is installed to push an image to SWR.</p>
|
||||
</div>
|
||||
<div class="section" id="swr_01_0011__section1577223318127"><h4 class="sectiontitle">Constraints</h4><p id="swr_01_0011__p0011218562">If you use Docker, the Docker version must be between 1.11.2 (included) and 24.0.9 (included). The size of each image layer cannot exceed 10 GB. You can push a maximum of 20 image layers concurrently.</p>
|
||||
<div class="section" id="swr_01_0011__section1577223318127"><h4 class="sectiontitle">Notes and Constraints</h4><p id="swr_01_0011__p0011218562">If you use Docker, the Docker version must be between 1.11.2 (included) and 24.0.9 (included). The size of each image layer cannot exceed 10 GB. You can push a maximum of 20 image layers concurrently.</p>
|
||||
</div>
|
||||
<div class="section" id="swr_01_0011__section115261275127"><h4 class="sectiontitle">Prerequisites</h4><ul id="swr_01_0011__ul19490738143214"><li id="swr_01_0011__li1490143811327">You have created an organization in SWR. For details, see <a href="swr_01_0014.html#swr_01_0014__section12921632181415">Creating an Organization</a>.</li><li id="swr_01_0011__li89952420187">If you use an ECS that is not a CCE node to connect to SWR using a private network address, configure <strong id="swr_01_0011__b141655413529">insecure-registries</strong> as follows:<ol id="swr_01_0011__ol1689492194"><li id="swr_01_0011__li968194921913">Modify the <span class="filepath" id="swr_01_0011__filepath19891112910366"><b>/etc/docker/daemon.json</b></span> file. If the file does not exist, manually create it. Add the following content to the file:<pre class="screen" id="swr_01_0011__screen6368134255419">{
|
||||
"insecure-registries": [
|
||||
@ -22,14 +22,14 @@
|
||||
</li></ol>
|
||||
</li></ul>
|
||||
</div>
|
||||
<div class="section" id="swr_01_0011__en-us_topic_0083050718_section862311112816"><h4 class="sectiontitle">Docker</h4><p id="swr_01_0011__en-us_topic_0083050718_p473620416297">The following walks you through the steps of uploading an image to SWR through the client by taking the <strong id="swr_01_0011__b2060902893215">nginx:v1</strong> image built in <a href="swr_01_0006.html">Basics of Docker</a> as an example.</p>
|
||||
<ol id="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_ol0471564418"><li id="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_li58001655123"><a name="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_li58001655123"></a><a name="en-us_topic_0112596104_en-us_topic_0075378957_li58001655123"></a><span>Access SWR.</span><p><ol type="a" id="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_ol48001255629"><li id="swr_01_0011__en-us_topic_0112596104_li20909134812497">Log in to the SWR console and then the VM running Docker as the <strong id="swr_01_0011__b1433105512515">root</strong> user.</li><li id="swr_01_0011__li753764116129"><a name="swr_01_0011__li753764116129"></a><a name="li753764116129"></a>In the navigation pane, choose <span class="uicontrol" id="swr_01_0011__uicontrol428519541269"><b>Dashboard</b></span> and click <strong id="swr_01_0011__b42918542067">Generate Login Command</strong> in the upper right corner. On the displayed page, click <span><img id="swr_01_0011__image1391110509405" src="en-us_image_0000002319267849.png"></span> to copy the login command.<div class="note" id="swr_01_0011__note181881745181711"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="swr_01_0011__ul19608122719168"><li id="swr_01_0011__li06082271161">A temporary login command is valid for 24 hours. For details about how to obtain a login command that will remain valid for a long term, see <a href="swr_01_1000.html">Obtaining a Long-Term Valid Docker Login Command</a>. After you obtain a long-term valid login command, your temporary login commands will still be valid as long as they are in their validity periods.</li><li id="swr_01_0011__li13362029141612">The domain name at the end of the login command is the image repository address. Record the address for later use.</li></ul>
|
||||
<div class="section" id="swr_01_0011__en-us_topic_0083050718_section862311112816"><h4 class="sectiontitle">Docker</h4><p id="swr_01_0011__en-us_topic_0083050718_p473620416297">The following walks you through the steps of uploading an image to SWR through the client by taking the <strong id="swr_01_0011__b698445216151">nginx:v1</strong> image built in <a href="swr_01_0006.html">Basics of Docker</a> as an example. The procedure is as follows:</p>
|
||||
<ol id="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_ol0471564418"><li id="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_li58001655123"><a name="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_li58001655123"></a><a name="en-us_topic_0112596104_en-us_topic_0075378957_li58001655123"></a><span>Access SWR.</span><p><ol type="a" id="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_ol48001255629"><li id="swr_01_0011__en-us_topic_0112596104_li20909134812497">Log in to the SWR console.</li><li id="swr_01_0011__li753764116129"><a name="swr_01_0011__li753764116129"></a><a name="li753764116129"></a>In the navigation pane, choose <span class="uicontrol" id="swr_01_0011__uicontrol428519541269"><b>Dashboard</b></span> and click <strong id="swr_01_0011__b42918542067">Generate Login Command</strong> in the upper right corner. On the displayed page, click <span><img id="swr_01_0011__image1391110509405" src="en-us_image_0000002319267849.png"></span> to copy the login command.<div class="note" id="swr_01_0011__note181881745181711"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="swr_01_0011__ul19608122719168"><li id="swr_01_0011__li06082271161">A temporary login command is valid for 24 hours. For details about how to obtain a login command that will remain valid for a long term, see <a href="swr_01_1000.html">Obtaining a Long-Term Docker Login Command</a>. After you obtain a long-term valid login command, your temporary login commands will still be valid as long as they are in their validity periods.</li><li id="swr_01_0011__li13362029141612">The domain name at the end of the login command is the image repository address. Record the address for later use.</li></ul>
|
||||
</div></div>
|
||||
</li><li id="swr_01_0011__en-us_topic_0112596104_li16945102816563">Run the <strong id="swr_01_0011__b68132050102918">docker login</strong> command on your Docker client (a device that has Docker installed).<p id="swr_01_0011__en-us_topic_0112596104_p1890203810712">The message "Login Succeeded" will be displayed upon a successful login.</p>
|
||||
</li></ol>
|
||||
</p></li><li id="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_li152356849"><span>Run the following command on the device where Docker is installed to label the <strong id="swr_01_0011__b17201820113010">nginx</strong> image:</span><p><p id="swr_01_0011__en-us_topic_0112596104_p163541257193816"><strong id="swr_01_0011__b41653471309">docker tag</strong> <em id="swr_01_0011__i3171194753020">[Image name 1</em>:<em id="swr_01_0011__i317154718306">tag 1]</em> <em id="swr_01_0011__i17171447153017">[Image repository address]</em>/<em id="swr_01_0011__i817114713309">[Organization name]</em>/<em id="swr_01_0011__i13172947163020">[Image name 2</em>:<em id="swr_01_0011__i21731447163019">tag 2]</em></p>
|
||||
<p id="swr_01_0011__en-us_topic_0112596104_p944354613117">In the preceding command:</p>
|
||||
<ul id="swr_01_0011__ul2511311124718"><li id="swr_01_0011__li10511191120477">[Image name 1:tag 1]: Replace it with the actual name and tag of the image to be pushed.</li><li id="swr_01_0011__li4953533194712">[Image repository address]: You can query the address on the SWR console. It is the domain name at the end of the login command in <a href="#swr_01_0011__li753764116129">1.b</a>.</li><li id="swr_01_0011__li186518363511">[Organization name]: Replace it with the name of the organization created.</li><li id="swr_01_0011__li3633435105112">[Image name 2: tag 2]: Replace it with the desired image name and tag.</li></ul>
|
||||
<ul id="swr_01_0011__ul2511311124718"><li id="swr_01_0011__li10511191120477">[Image name 1:tag 1]: Replace it with the actual name and tag of the image to be pushed.</li><li id="swr_01_0011__li4953533194712">[Image repository address]: You can query the address on the SWR console. It is the domain name at the end of the login command in <a href="#swr_01_0011__li753764116129">1.b</a>.</li><li id="swr_01_0011__li186518363511">[Organization name]: Replace it with the name of the organization created.</li><li id="swr_01_0011__li3633435105112">[Image name 2:tag 2]: Replace it with the name and tag of the image to be uploaded.</li></ul>
|
||||
<p id="swr_01_0011__p137768714200">Example:</p>
|
||||
<p id="swr_01_0011__p027419151243"><strong id="swr_01_0011__b17681119162411">docker tag nginx:v1 swr.eu-de.otc.t-systems.com/group/nginx:v1</strong></p>
|
||||
</p></li><li id="swr_01_0011__en-us_topic_0112596104_li1337910433512"><span><span class="keyword" id="swr_01_0011__keyword234715327572">Push the image to the image repository</span> by running the following command:</span><p><p id="swr_01_0011__en-us_topic_0112596104_en-us_topic_0075378957_p226420527123"><strong id="swr_01_0011__b8489155793518">docker push</strong> <em id="swr_01_0011__i3495195783516">[Image repository address]</em>/<em id="swr_01_0011__i1549545713354">[Organization name]</em>/<em id="swr_01_0011__i1649517571351">[Image name</em> 2:<em id="swr_01_0011__i204961572359">tag 2]</em></p>
|
||||
@ -43,12 +43,10 @@ v1: digest: sha256:eb7e3bbd8e3040efa71d9c2cacfa12a8e39c6b2ccd15eac12bdc49e0b66ce
|
||||
<p id="swr_01_0011__en-us_topic_0112596104_p17380144320510">To view the pushed image, refresh the <span class="uicontrol" id="swr_01_0011__uicontrol6583131173919"><b>My Images</b></span> page.</p>
|
||||
</p></li></ol>
|
||||
</div>
|
||||
<div class="section" id="swr_01_0011__section1560655973317"><h4 class="sectiontitle">containerd</h4><ol id="swr_01_0011__ol0302058193012"><li id="swr_01_0011__li145131020103212"><span>Log in to the SWR console.</span></li><li id="swr_01_0011__li719274104316"><span>In the navigation pane, choose <strong id="swr_01_0011__b948964134710">My Images</strong>. Then click the name of the target image.</span></li><li id="swr_01_0011__li16192124154316"><a name="swr_01_0011__li16192124154316"></a><a name="li16192124154316"></a><span>On the <strong id="swr_01_0011__b1949555216572">Pull/Push</strong> tab, click <strong id="swr_01_0011__b4496125219577">Generate Push Command</strong> and copy the command.</span><p><div class="note" id="swr_01_0011__note1962918381033"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="swr_01_0011__p714112211102">The command is only valid for six hours after it is generated. To obtain a long-term valid command, see <a href="swr_01_1001.html">Obtaining a Long-Term Valid containerd Pull/Push Command</a>.</p>
|
||||
<div class="section" id="swr_01_0011__section1560655973317"><h4 class="sectiontitle">containerd</h4><ol id="swr_01_0011__ol0302058193012"><li id="swr_01_0011__li145131020103212"><span>Log in to the SWR console.</span></li><li id="swr_01_0011__li719274104316"><span>In the navigation pane, choose <strong id="swr_01_0011__b948964134710">My Images</strong>. Then click the name of the target image.</span></li><li id="swr_01_0011__li16192124154316"><a name="swr_01_0011__li16192124154316"></a><a name="li16192124154316"></a><span>On the image details page, click the <strong id="swr_01_0011__b73411610154318">Pull/Push</strong> tab and click <strong id="swr_01_0011__b44481820154318">Generate Push Command</strong> to copy the command for uploading an image through containerd.</span><p><div class="note" id="swr_01_0011__note1962918381033"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="swr_01_0011__p714112211102">The command is only valid for six hours after it is generated. To obtain a long-term valid command, see <a href="swr_01_1001.html">Obtaining a Long-Term Valid containerd Pull/Push Command</a>.</p>
|
||||
</div></div>
|
||||
</p></li><li id="swr_01_0011__li8227252164714"><span>Log in to the VM running containerd as the <strong id="swr_01_0011__b167383613485">root</strong> user.</span></li><li id="swr_01_0011__li2851715134816"><span>Run the command copied in <a href="#swr_01_0011__li16192124154316">3</a>.</span><p><p id="swr_01_0011__p1041118259407"><span><img id="swr_01_0011__image7579151620194" src="en-us_image_0000002037092213.png"></span></p>
|
||||
</p></li><li id="swr_01_0011__li5861371379"><span>Check whether the image is pushed successfully.</span><p><p id="swr_01_0011__p1890572911914"></p>
|
||||
<p id="swr_01_0011__p83985122110"></p>
|
||||
</p></li></ol>
|
||||
</p></li><li id="swr_01_0011__li8227252164714"><span>Log in to the VM running containerd as the <strong id="swr_01_0011__b167383613485">root</strong> user.</span></li><li id="swr_01_0011__li2851715134816"><span>Run the image push command copied in <a href="#swr_01_0011__li16192124154316">3</a> on the VM. Before running the command, change the organization name, image name, and tag to those of the image to be uploaded.</span><p><p id="swr_01_0011__p1041118259407"><span><img id="swr_01_0011__image7579151620194" src="en-us_image_0000002037092213.png"></span></p>
|
||||
</p></li><li id="swr_01_0011__li5861371379"><span>Check whether the image is pushed successfully.</span></li></ol>
|
||||
</div>
|
||||
</div>
|
||||
<div>
|
||||
|
||||
@ -8,7 +8,7 @@
|
||||
<p id="swr_01_0015__p1620184711378">If you are not an SWR admin user, you can request an SWR admin user to grant you permissions to read, edit, or manage a specific image or images in a specific organization.</p>
|
||||
<p id="swr_01_0015__p415694411426"><strong id="swr_01_0015__b1091491518468">Examples</strong></p>
|
||||
<ul id="swr_01_0015__ul5726731201912"><li id="swr_01_0015__en-us_topic_0000001188123611_li19341958192113">Example 1: An IAM user with the ServiceStage Developer permission (SWR read-only permission) wants to pull the <span class="parmvalue" id="swr_01_0015__en-us_topic_0000001188123611_parmvalue13828153018185"><b>nginx</b></span> image created by the SWR administrator in the <span class="parmvalue" id="swr_01_0015__en-us_topic_0000001188123611_parmvalue5673460184"><b>group</b></span> organization.<p id="swr_01_0015__en-us_topic_0000001188123611_p75499594215">Solution: On the details page of the <span class="parmvalue" id="swr_01_0015__en-us_topic_0000001188123611_parmvalue145991503228"><b>nginx</b></span> image, the SWR administrator grants the <span class="uicontrol" id="swr_01_0015__en-us_topic_0000001188123611_uicontrol0752192293719"><b>read</b></span> permission to the IAM user.</p>
|
||||
</li><li id="swr_01_0015__en-us_topic_0000001188123611_li18475606221">Example 2: An SWR administrator wants to grant an external user the permission to push images to the organization, but the user is not allowed to log in to the console and can only push images through the container engine client.<p id="swr_01_0015__en-us_topic_0000001188123611_p157578516210"><a name="swr_01_0015__en-us_topic_0000001188123611_li18475606221"></a><a name="en-us_topic_0000001188123611_li18475606221"></a>Solution: On the <span class="uicontrol" id="swr_01_0015__en-us_topic_0000001188123611_uicontrol14451103814423"><b>Users</b></span> tab page of the details page of the organization, the SWR administrator grants the <span class="uicontrol" id="swr_01_0015__en-us_topic_0000001188123611_uicontrol6704426114218"><b>edit</b></span> permission to the user. In IAM, the administrator sets <strong id="swr_01_0015__en-us_topic_0000001188123611_b22693814819">Access Type</strong> to <span class="uicontrol" id="swr_01_0015__en-us_topic_0000001188123611_uicontrol52782054144218"><b>Programmatic access</b></span>.</p>
|
||||
</li><li id="swr_01_0015__en-us_topic_0000001188123611_li18475606221">Example 2: An SWR administrator wants to grant an external user the permission to push images to the organization, but the user is not allowed to log in to the console and can only push images through the container engine client.<p id="swr_01_0015__en-us_topic_0000001188123611_p157578516210"><a name="swr_01_0015__en-us_topic_0000001188123611_li18475606221"></a><a name="en-us_topic_0000001188123611_li18475606221"></a>Solution: On the <span class="uicontrol" id="swr_01_0015__en-us_topic_0000001188123611_uicontrol14451103814423"><b>Users</b></span> tab of the details page of the organization, the SWR administrator grants the <span class="uicontrol" id="swr_01_0015__en-us_topic_0000001188123611_uicontrol6704426114218"><b>edit</b></span> permission to the user. In IAM, the administrator sets <strong id="swr_01_0015__en-us_topic_0000001188123611_b22693814819">Access Type</strong> to <span class="uicontrol" id="swr_01_0015__en-us_topic_0000001188123611_uicontrol52782054144218"><b>Programmatic access</b></span>.</p>
|
||||
</li></ul>
|
||||
</div>
|
||||
<div class="section" id="swr_01_0015__section1720374872510"><h4 class="sectiontitle">Authorization Method</h4><p id="swr_01_0015__p5538919183917">You can grant permissions to users in SWR by using either of the following methods:</p>
|
||||
@ -18,7 +18,7 @@
|
||||
<ul id="swr_01_0015__ul388714187544"><li id="swr_01_0015__l318059e27a5e4699940d3d1ce20d82b6"><span class="keyword" id="swr_01_0015__keyword04485016538">Read</span>: Users can only pull images.</li><li id="swr_01_0015__la5b459c83e9241b9a650dfc5f1736e8e"><span class="keyword" id="swr_01_0015__keyword198125414306">Write</span>: Users can pull and push images and edit image attributes.</li><li id="swr_01_0015__li1888711186547"><span class="keyword" id="swr_01_0015__keyword7888121943117">Manage</span>: Users can pull and push images, delete images or tags, edit image attributes, grant permissions, and share images with other users.</li></ul>
|
||||
</div>
|
||||
<div class="section" id="swr_01_0015__section851514354541"><a name="swr_01_0015__section851514354541"></a><a name="section851514354541"></a><h4 class="sectiontitle">Granting Permissions for a Specific Image</h4><p id="swr_01_0015__p250766155518">To allow users to read, write, and manage a specific image, grant corresponding permissions to them on the details page of this image.</p>
|
||||
<ol id="swr_01_0015__ol9264203131814"><li id="swr_01_0015__li162641439189"><span>Log in to the SWR console.</span></li><li id="swr_01_0015__li32649318187"><span>In the navigation pane, choose <span class="uicontrol" id="swr_01_0015__uicontrol19805185111311"><b>My Images</b></span> and click the desired image.</span></li><li id="swr_01_0015__li172649314189"><span>On the image details page, click the <span class="uicontrol" id="swr_01_0015__uicontrol04808543311"><b>Permissions</b></span> tab.</span></li><li id="swr_01_0015__li926416321813"><span>Click <span class="uicontrol" id="swr_01_0015__uicontrol77806378468"><b>Grant Permission</b></span>. Select <span class="uicontrol" id="swr_01_0015__uicontrol787294512469"><b>Read/Edit/Manage</b></span> next to the user name to grant corresponding permissions.</span></li></ol>
|
||||
<ol id="swr_01_0015__ol9264203131814"><li id="swr_01_0015__li162641439189"><span>Log in to the SWR console.</span></li><li id="swr_01_0015__li32649318187"><span>In the navigation pane, choose <span class="uicontrol" id="swr_01_0015__uicontrol18360326202810"><b>My Images</b></span>. Then click the name of the target image.</span></li><li id="swr_01_0015__li172649314189"><span>On the image details page, click the <span class="uicontrol" id="swr_01_0015__uicontrol04808543311"><b>Permissions</b></span> tab.</span></li><li id="swr_01_0015__li926416321813"><span>Click <span class="uicontrol" id="swr_01_0015__uicontrol77806378468"><b>Grant Permission</b></span>. Select <span class="uicontrol" id="swr_01_0015__uicontrol787294512469"><b>Read/Edit/Manage</b></span> next to the user name to grant corresponding permissions.</span></li></ol>
|
||||
</div>
|
||||
<div class="section" id="swr_01_0015__section12896443593"><h4 class="sectiontitle">Modifying or Deleting Permissions for a Specific Image</h4><p id="swr_01_0015__p52095184593">You can also modify or delete user permissions on the image details page.</p>
|
||||
<ul id="swr_01_0015__ul1730424812293"><li id="swr_01_0015__li53041648102917">Modifying permissions: On the <span class="uicontrol" id="swr_01_0015__uicontrol7311115418167"><b>Permissions</b></span>, click <span class="uicontrol" id="swr_01_0015__uicontrol17792754153219"><b>Edit</b></span> in the row of the desired username. Select a permission from the <span class="uicontrol" id="swr_01_0015__uicontrol479819541321"><b>Permission</b></span> drop-down list and click <span class="uicontrol" id="swr_01_0015__uicontrol179895473212"><b>Save</b></span> in the <strong id="swr_01_0015__b18799254163211">Operation</strong> column.</li><li id="swr_01_0015__li032933101913">Deleting permissions: On the <strong id="swr_01_0015__b1341902182116">Permissions</strong> tab, click <span class="uicontrol" id="swr_01_0015__uicontrol141991056183420"><b>Delete</b></span> in the row of the desired username and then click <strong id="swr_01_0015__b101991856103410">OK</strong>.</li></ul>
|
||||
|
||||
@ -15,7 +15,7 @@ xxx/group/nginx v2.0.0 22f2bf2e2b4f 5 hours ago
|
||||
</div></div>
|
||||
</p></li><li id="swr_01_0017__en-us_topic_0000001952079513_li8227252164714"><span>Log in to the VM running containerd as the <strong id="swr_01_0017__b486685384114812">root</strong> user.</span></li><li id="swr_01_0017__en-us_topic_0000001952079513_li2851715134816"><span>Run the command copied in <a href="#swr_01_0017__en-us_topic_0000001952079513_li16192124154316">3</a>.</span><p><ul id="swr_01_0017__en-us_topic_0000001952079513_ul3357204210232"><li id="swr_01_0017__en-us_topic_0000001952079513_li735784213232">If the command was copied from the <strong id="swr_01_0017__b52637329924327">Operation</strong> column, run it as follows.<p id="swr_01_0017__en-us_topic_0000001952079513_p1937194615226"><span><img id="swr_01_0017__en-us_topic_0000001952079513_image133701746102218" src="en-us_image_0000002000854844.png"></span></p>
|
||||
</li></ul>
|
||||
<ul id="swr_01_0017__en-us_topic_0000001952079513_ul456114450239"><li id="swr_01_0017__en-us_topic_0000001952079513_li1556115458235">If the command was copied from the <strong id="swr_01_0017__b52001780024327">Pull/Push</strong> tab, run it as follows (replace <em id="swr_01_0017__i107819236424327">{Tag}</em> with the new image tag).<p id="swr_01_0017__en-us_topic_0000001952079513_p137115464227"><span><img id="swr_01_0017__en-us_topic_0000001952079513_image1237154692218" src="en-us_image_0000002037053129.png"></span></p>
|
||||
<ul id="swr_01_0017__en-us_topic_0000001952079513_ul456114450239"><li id="swr_01_0017__en-us_topic_0000001952079513_li1556115458235">If the command was copied from the <strong id="swr_01_0017__b298217183911">Pull/Push</strong> tab, run it as follows. Change the organization name, image name, and tag to those of the image to be uploaded.<p id="swr_01_0017__en-us_topic_0000001952079513_p137115464227"><span><img id="swr_01_0017__en-us_topic_0000001952079513_image1237154692218" src="en-us_image_0000002037053129.png"></span></p>
|
||||
</li></ul>
|
||||
</p></li><li id="swr_01_0017__en-us_topic_0000001952079513_li2041611269466"><span>Check whether the image is pulled successfully.</span><p><ul id="swr_01_0017__en-us_topic_0000001952079513_ul1555314534710"><li id="swr_01_0017__en-us_topic_0000001952079513_li19587141264717">If the command was copied from the <strong id="swr_01_0017__b40896908824327">Operation</strong> column, run <strong id="swr_01_0017__b20262549424327">crictl images</strong> to check whether the pull is successful.<p id="swr_01_0017__en-us_topic_0000001952079513_p42592042112"><span><img id="swr_01_0017__en-us_topic_0000001952079513_image77329931317" src="en-us_image_0000002001013122.png"></span></p>
|
||||
</li><li id="swr_01_0017__en-us_topic_0000001952079513_li1455355164715">If the command was copied from the <strong id="swr_01_0017__b52835053224327">Pull/Push</strong> tab, run <strong id="swr_01_0017__b12281959224327">ctr images list</strong> to check whether the pull is successful.<p id="swr_01_0017__en-us_topic_0000001952079513_p47528201616"><span><img id="swr_01_0017__en-us_topic_0000001952079513_image1731812303176" src="en-us_image_0000002037094013.png"></span></p>
|
||||
|
||||
@ -23,16 +23,16 @@
|
||||
<td class="cellrowborder" valign="top" width="71.89%" headers="mcps1.3.3.2.4.2.1.2.3.1.2 "><p id="swr_01_0026__p19562036142814">Set a validity period. If you want the image to be permanently accessible to the account, select <strong id="swr_01_0026__b594612152510">Permanently valid</strong>.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_01_0026__row990015180318"><td class="cellrowborder" valign="top" width="28.110000000000003%" headers="mcps1.3.3.2.4.2.1.2.3.1.1 "><p id="swr_01_0026__p12956123672811">Description</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="71.89%" headers="mcps1.3.3.2.4.2.1.2.3.1.2 "><p id="swr_01_0026__p2095663672811">Enter a maximum of 1,000 characters.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_01_0026__row090041873120"><td class="cellrowborder" valign="top" width="28.110000000000003%" headers="mcps1.3.3.2.4.2.1.2.3.1.1 "><p id="swr_01_0026__p3956173622818">Permission</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="71.89%" headers="mcps1.3.3.2.4.2.1.2.3.1.2 "><p id="swr_01_0026__p1895643616283">Only the <strong id="swr_01_0026__b4350182012186">Pull</strong> permission is supported currently.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_01_0026__row5900102612136"><td class="cellrowborder" valign="top" width="28.110000000000003%" headers="mcps1.3.3.2.4.2.1.2.3.1.1 "><p id="swr_01_0026__p18981726151319">Description</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="71.89%" headers="mcps1.3.3.2.4.2.1.2.3.1.2 "><p id="swr_01_0026__p989832611318">Enter a maximum of 1,000 characters.</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
|
||||
@ -6,7 +6,7 @@
|
||||
<ul class="ullinks">
|
||||
<li class="ulchildlink"><strong><a href="swr_01_0011.html">Uploading an Image Through a Container Engine Client</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="swr_01_1000.html">Obtaining a Long-Term Valid Docker Login Command</a></strong><br>
|
||||
<li class="ulchildlink"><strong><a href="swr_01_1000.html">Obtaining a Long-Term Docker Login Command</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="swr_01_1001.html">Obtaining a Long-Term Valid containerd Pull/Push Command</a></strong><br>
|
||||
</li>
|
||||
|
||||
13
docs/swr/umn/swr_01_0083.html
Normal file
13
docs/swr/umn/swr_01_0083.html
Normal file
@ -0,0 +1,13 @@
|
||||
<a name="swr_01_0083"></a><a name="swr_01_0083"></a>
|
||||
|
||||
<h1 class="topictitle1">Auditing</h1>
|
||||
<div id="body1570602531300"></div>
|
||||
<div>
|
||||
<ul class="ullinks">
|
||||
<li class="ulchildlink"><strong><a href="swr_01_0084.html">SWR Operations Supported by CTS</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="cts_02_0002.html">Viewing CTS Traces in the Trace List</a></strong><br>
|
||||
</li>
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
348
docs/swr/umn/swr_01_0084.html
Normal file
348
docs/swr/umn/swr_01_0084.html
Normal file
File diff suppressed because it is too large
Load Diff
@ -1,27 +1,27 @@
|
||||
<a name="swr_01_1000"></a><a name="swr_01_1000"></a>
|
||||
|
||||
<h1 class="topictitle1">Obtaining a Long-Term Valid Docker Login Command</h1>
|
||||
<div id="body1526527373724"><div class="section" id="swr_01_1000__section139621122486"><h4 class="sectiontitle">Scenario</h4><p id="swr_01_1000__p6864442134918">This section describes how to obtain a Docker login command that is valid for a year.</p>
|
||||
<div class="note" id="swr_01_1000__note1521917215294"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="swr_01_1000__p122193219294">For security purposes, you are advised to obtain the command in a development environment.</p>
|
||||
<h1 class="topictitle1">Obtaining a Long-Term Docker Login Command</h1>
|
||||
<div id="body1526527373724"><div class="section" id="swr_01_1000__section139621122486"><h4 class="sectiontitle">Scenario</h4>
|
||||
<div class="caution" id="swr_01_1000__note1467311282507"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><ul id="swr_01_1000__ul20886175952115"><li id="swr_01_1000__li1688611594212">Keep the above commands secure.</li><li id="swr_01_1000__li189213114224">For security purposes, you are advised to obtain the commands in a development environment.</li></ul>
|
||||
</div></div>
|
||||
<p id="swr_01_1000__p6864442134918">This section describes how to obtain a Docker login command that is valid for a year.</p>
|
||||
</div>
|
||||
<div class="section" id="swr_01_1000__section447122712411"><h4 class="sectiontitle">Process</h4><p id="swr_01_1000__p205744652415">You can obtain a long-term valid login command as the following process:</p>
|
||||
<div class="fignone" id="swr_01_1000__fig814171712513"><span class="figcap"><b>Figure 1 </b>Process</span><br><span><img id="swr_01_1000__image7141191792517" src="en-us_image_0000001539605245.png"></span></div>
|
||||
</div>
|
||||
<div class="section" id="swr_01_1000__section140815918599"><h4 class="sectiontitle">Procedure</h4><ol id="swr_01_1000__ol2768163651813"><li id="swr_01_1000__li122491614174210"><a name="swr_01_1000__li122491614174210"></a><a name="li122491614174210"></a><span><strong id="swr_01_1000__b769314712814">Obtain the programmatic access permission. (If the current user has the permission, skip this step.)</strong></span><p><ol type="a" id="swr_01_1000__ol166282020114314"><li id="swr_01_1000__li962862016433">Log in to the management console as an administrator.</li><li id="swr_01_1000__li1396382454819">Click <span><img id="swr_01_1000__image69631524114811" src="en-us_image_0000001507688112.png"></span> in the upper left corner and select a region and a project.</li><li id="swr_01_1000__li796320240486">Click <span><img id="swr_01_1000__image1296392416481" src="en-us_image_0000001558527697.png"></span> in the navigation pane on the left and choose <strong id="swr_01_1000__b454814149713">Management & Deployment</strong> > <strong id="swr_01_1000__b1360217431878">Identity and Access Management</strong>.</li><li id="swr_01_1000__li1648619084417">Enter the name of the user to whom you want to grant the programmatic access permission in the search box on the <span class="uicontrol" id="swr_01_1000__uicontrol2591115485711"><b>Users</b></span> page.</li><li id="swr_01_1000__li13271644917">Click the user to go to its details page.</li><li id="swr_01_1000__li1824411845118">Click next to <span class="uicontrol" id="swr_01_1000__uicontrol1240373214107"><b>Access Type</b></span>.</li><li id="swr_01_1000__li1224675617202">Select <span class="uicontrol" id="swr_01_1000__uicontrol666119454011"><b>Programmatic access</b></span>. (You can select only programmatic access or both access types.)</li></ol>
|
||||
</p></li><li id="swr_01_1000__li5768123671815"><a name="swr_01_1000__li5768123671815"></a><a name="li5768123671815"></a><span>Obtain the region, project name, and image repository address.</span><p><ol type="a" id="swr_01_1000__ol1692413110449"><li id="swr_01_1000__li17636121114363">Log in to the management console, click your username in the upper right corner, and click <span class="uicontrol" id="swr_01_1000__uicontrol176323015916"><b>My Credentials</b></span>.</li><li id="swr_01_1000__li165135188513">On the <strong id="swr_01_1000__b12623461053">Projects</strong> tab page, search for the project corresponding to the current region.</li><li id="swr_01_1000__li533871972612">Obtain the image repository address by referring to <a href="swr_01_0011.html#swr_01_0011__li753764116129">1.b</a>. The domain name at the end of the login command is the image repository address.</li></ol>
|
||||
</p></li><li id="swr_01_1000__li1863783911295"><a name="swr_01_1000__li1863783911295"></a><a name="li1863783911295"></a><span>Obtain an AK/SK.</span><p><div class="note" id="swr_01_1000__note47741129113520"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="swr_01_1000__p867354104619">The access key ID (AK) and secret access key (SK) are a pair of access keys used together to authenticate users who wish to make API requests. The AK/AS pair provides functions similar to a password. If you already have an AK/SK, skip this step.</p>
|
||||
<div class="section" id="swr_01_1000__section140815918599"><h4 class="sectiontitle">Obtaining a Long-Term Docker Login Command</h4><ol id="swr_01_1000__ol2768163651813"><li id="swr_01_1000__li122491614174210"><a name="swr_01_1000__li122491614174210"></a><a name="li122491614174210"></a><span>Obtain the programming access permission. (If you already have the programming access permission, skip this step.)</span><p><ol type="a" id="swr_01_1000__ol166282020114314"><li id="swr_01_1000__li962862016433">Log in to the management console as an administrator.</li><li id="swr_01_1000__li1396382454819">Click <span><img id="swr_01_1000__image69631524114811" src="en-us_image_0000001507688112.png"></span> in the upper left corner and select a region and a project.</li><li id="swr_01_1000__li796320240486">Click <span><img id="swr_01_1000__image1296392416481" src="en-us_image_0000001558527697.png"></span> in the navigation pane on the left and choose <strong id="swr_01_1000__b454814149713">Management & Deployment</strong> > <strong id="swr_01_1000__b1360217431878">Identity and Access Management</strong>.</li><li id="swr_01_1000__li1648619084417">Enter the name of the user to whom you want to grant the programmatic access permission in the search box on the <span class="uicontrol" id="swr_01_1000__uicontrol2591115485711"><b>Users</b></span> page.</li><li id="swr_01_1000__li13271644917">Click the user to go to its details page.</li><li id="swr_01_1000__li1824411845118">Click next to <span class="uicontrol" id="swr_01_1000__uicontrol1240373214107"><b>Access Type</b></span>.</li><li id="swr_01_1000__li1224675617202">Select <span class="uicontrol" id="swr_01_1000__uicontrol666119454011"><b>Programmatic access</b></span>. (You can select only programmatic access or both access types.)</li></ol>
|
||||
</p></li><li id="swr_01_1000__li1863783911295"><a name="swr_01_1000__li1863783911295"></a><a name="li1863783911295"></a><span>Obtain an AK/SK. (If you already have an AK/SK, skip this step.)</span><p><div class="note" id="swr_01_1000__note47741129113520"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="swr_01_1000__p867354104619">The access key ID (AK) and secret access key (SK) are a pair of access keys used together to authenticate users who wish to make API requests. The AK/AS pair provides functions similar to a password. If you already have an AK/SK, skip this step.</p>
|
||||
</div></div>
|
||||
<ol type="a" id="swr_01_1000__ol135056239350"><li id="swr_01_1000__li1856382020016">Log in to the management console, click your username in the upper right corner, and click <strong id="swr_01_1000__b192218382046">My Credentials</strong>.</li><li id="swr_01_1000__li750572393517">On the <strong id="swr_01_1000__b973619128514">Access Keys</strong> tab page, click <strong id="swr_01_1000__b17432012554">Add Access Key</strong>.</li><li id="swr_01_1000__li150592353512">Enter the login password and verification code sent to your mailbox or mobile phone.</li><li id="swr_01_1000__li3505112314357">Download the access key, which includes the AK and SK.<div class="note" id="swr_01_1000__note2050512393510"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="swr_01_1000__p4505423163519">Keep the access key secure and do not disclose it to any unauthorized personnel.</p>
|
||||
<ol type="a" id="swr_01_1000__ol135056239350"><li id="swr_01_1000__li1856382020016">Log in to the management console, click your username in the upper right corner, and click <strong id="swr_01_1000__b192218382046">My Credentials</strong>.</li><li id="swr_01_1000__li750572393517">On the <strong id="swr_01_1000__b973619128514">Access Keys</strong> tab, click <strong id="swr_01_1000__b17432012554">Add Access Key</strong>.</li><li id="swr_01_1000__li150592353512">Enter the login password and verification code sent to your mailbox or mobile phone.</li><li id="swr_01_1000__li3505112314357">Download the access key, which includes the AK and SK.<div class="note" id="swr_01_1000__note2050512393510"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="swr_01_1000__p4505423163519">Keep the access key secure and do not disclose it to any unauthorized personnel.</p>
|
||||
</div></div>
|
||||
</li></ol>
|
||||
</p></li><li id="swr_01_1000__li09141628224"><span>Log in to the SWR console.</span></li><li id="swr_01_1000__li71626411212"><span>Click <strong id="swr_01_1000__b1524119245196">Generate Login Command</strong>. On the <strong id="swr_01_1000__b1124152451910">Long-Term Login Command</strong> tab, click <strong id="swr_01_1000__b92413245195">Import Access Keys</strong> to upload <strong id="swr_01_1000__b1324152491914">credentials.csv</strong> or enter the <strong id="swr_01_1000__b124152413196">Access Key ID</strong> and <strong id="swr_01_1000__b14241122410199">Secret Access Key</strong> contained in <strong id="swr_01_1000__b192417247196">credentials.csv</strong> obtained in <a href="#swr_01_1000__li1863783911295">2</a>. Click <strong id="swr_01_1000__b142412247197">Generate Command</strong>. No further action is required. If the <strong id="swr_01_1000__b56245496318">Long-Term Login Command</strong> tab is not displayed on the console, skip this step and manually combine the long-term login command.</span></li><li id="swr_01_1000__li5768123671815"><a name="swr_01_1000__li5768123671815"></a><a name="li5768123671815"></a><span>Obtain the region, project name, and image repository address.</span><p><ol type="a" id="swr_01_1000__ol1692413110449"><li id="swr_01_1000__li17636121114363">Log in to the management console, click your username in the upper right corner, and click <span class="uicontrol" id="swr_01_1000__uicontrol176323015916"><b>My Credentials</b></span>.</li><li id="swr_01_1000__li165135188513">On the <strong id="swr_01_1000__b12623461053">Projects</strong> tab, search for the project corresponding to the current region.</li><li id="swr_01_1000__li533871972612">Obtain the image repository address by referring to <a href="swr_01_0011.html#swr_01_0011__li753764116129">1.b</a>. The domain name at the end of the login command is the image repository address.</li></ol>
|
||||
</p></li><li id="swr_01_1000__li132430753010"><a name="swr_01_1000__li132430753010"></a><a name="li132430753010"></a><span>Log in to a Linux PC and run the following command to <span class="keyword" id="swr_01_1000__keyword83181535173114">obtain the login key</span>:</span><p><p id="swr_01_1000__p101396227569"><strong id="swr_01_1000__b183847299230">printf "<em id="swr_01_1000__i913613510377">$AK</em>" | openssl dgst -binary -sha256 -hmac "<em id="swr_01_1000__i11361555373">$SK</em>" | od -An -vtx1 | sed 's/[ \n]//g' | sed 'N;s/\n//'</strong></p>
|
||||
<p id="swr_01_1000__p6793194675712">In the command, <em id="swr_01_1000__i66546185715">$AK</em> and <em id="swr_01_1000__i1625942212710">$SK</em> indicate the AK and SK obtained in <a href="#swr_01_1000__li1863783911295">3</a>.</p>
|
||||
<p id="swr_01_1000__p6793194675712">In the command, <em id="swr_01_1000__i66546185715">$AK</em> and <em id="swr_01_1000__i1625942212710">$SK</em> indicate the AK and SK obtained in <a href="#swr_01_1000__li1863783911295">2</a>.</p>
|
||||
<div class="fignone" id="swr_01_1000__fig56444333813"><span class="figcap"><b>Figure 2 </b>Sample command output</span><br><span><img id="swr_01_1000__image156445335810" src="en-us_image_0165729699.png"></span></div>
|
||||
</p></li><li id="swr_01_1000__li5743102065612"><span>Put the information you obtained in the following format to generate a long-term valid login command:</span><p><p id="swr_01_1000__p1568617424597"><strong id="swr_01_1000__b12402163612512">docker login -u</strong> [<em id="swr_01_1000__i778855718392">Regional project name</em>]<strong id="swr_01_1000__b14491359143913">@</strong>[<em id="swr_01_1000__i798944517396">AK</em>] <strong id="swr_01_1000__b4126195219510">-p</strong> [<em id="swr_01_1000__i1058412479398">Login key</em>] [<em id="swr_01_1000__i860045174012">Image repository address</em>]</p>
|
||||
<p id="swr_01_1000__p11139175415">In the command, the regional project name and image repository address are obtained in <a href="#swr_01_1000__li5768123671815">2</a>, the AK in <a href="#swr_01_1000__li1863783911295">3</a>, and the login key in <a href="#swr_01_1000__li132430753010">4</a>.</p>
|
||||
<div class="note" id="swr_01_1000__note10514103775017"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="swr_01_1000__p15514133785011">The login key is encrypted and cannot be decrypted. Therefore, other users cannot obtain the SK from -p.</p>
|
||||
<p id="swr_01_1000__p118301550175412">The login command can be used on other devices.</p>
|
||||
<p id="swr_01_1000__p11139175415">In the command, the regional project name and image repository address are obtained in <a href="#swr_01_1000__li5768123671815">5</a>, the AK in <a href="#swr_01_1000__li1863783911295">2</a>, and the login key in <a href="#swr_01_1000__li132430753010">6</a>.</p>
|
||||
<div class="note" id="swr_01_1000__note10514103775017"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="swr_01_1000__ul10811103214168"><li id="swr_01_1000__li2811173219166">The login key is encrypted and cannot be decrypted. Therefore, other users cannot obtain the SK from -p.</li><li id="swr_01_1000__li1493783414169">The login command can be used on other devices.</li></ul>
|
||||
</div></div>
|
||||
</p></li><li id="swr_01_1000__li273684916227"><span>Run the <strong id="swr_01_1000__b1892424665117">history -c</strong> command to clear the operation records.</span></li></ol>
|
||||
</div>
|
||||
|
||||
@ -6,12 +6,12 @@
|
||||
<ul id="swr_01_1001__ul88467151223"><li id="swr_01_1001__li128462151320">Ensure that you have permission to access the IAM service.</li></ul>
|
||||
</div></div>
|
||||
</div>
|
||||
<div class="section" id="swr_01_1001__section19127184911472"><h4 class="sectiontitle">Procedure</h4><ol id="swr_01_1001__ol193212594351"><li id="swr_01_1001__li53211459103517"><span>Obtain the programmatic access permission by referring to <a href="swr_01_1000.html#swr_01_1000__li122491614174210">1</a>.</span></li><li id="swr_01_1001__li133211659143520"><span>Obtain the resource space name, image repository address, AK, and login key by referring to <a href="swr_01_1000.html#swr_01_1000__li5768123671815">2</a> to <a href="swr_01_1000.html#swr_01_1000__li132430753010">4</a>.</span></li><li id="swr_01_1001__li1432120596350"><span>Concatenate the obtained information to form a long-term valid containerd command.</span><p><p id="swr_01_1001__p163211759133516">1. Image pull command</p>
|
||||
<div class="section" id="swr_01_1001__section19127184911472"><h4 class="sectiontitle">Procedure</h4><ol id="swr_01_1001__ol193212594351"><li id="swr_01_1001__li53211459103517"><span>Obtain the programmatic access permission by referring to <a href="swr_01_1000.html#swr_01_1000__li122491614174210">1</a>.</span></li><li id="swr_01_1001__li133211659143520"><span>Obtain the resource space name, image repository address, AK, and login key by referring to <a href="swr_01_1000.html#swr_01_1000__li5768123671815">5</a> to <a href="swr_01_1000.html#swr_01_1000__li132430753010">6</a>.</span></li><li id="swr_01_1001__li1432120596350"><span>Concatenate the obtained information to form a long-term valid containerd command.</span><p><p id="swr_01_1001__p163211759133516">1. Image pull command</p>
|
||||
<p id="swr_01_1001__p93211595353"><strong id="swr_01_1001__b196562487422114">ctr image pull --user</strong><em id="swr_01_1001__i1875125522114"> [Resource space name]</em> <strong id="swr_01_1001__b183203010522114">@</strong><em id="swr_01_1001__i160612900022114">[AK]</em><strong id="swr_01_1001__b165036669922114">:</strong> <em id="swr_01_1001__i33199028822114">[Login key]</em> <em id="swr_01_1001__i178669944722114">[Image repository address]</em></p>
|
||||
<p id="swr_01_1001__p1732115915355">In the command, the resource space name and image repository address are obtained in <a href="swr_01_1000.html#swr_01_1000__li5768123671815">2</a>, the AK in <a href="swr_01_1000.html#swr_01_1000__li1863783911295">3</a>, and the login key in <a href="swr_01_1000.html#swr_01_1000__li132430753010">4</a>.</p>
|
||||
<p id="swr_01_1001__p1732115915355">In the command, the resource space name and image repository address are obtained in <a href="swr_01_1000.html#swr_01_1000__li5768123671815">5</a>, the AK in <a href="swr_01_1000.html#swr_01_1000__li1863783911295">2</a>, and the login key in <a href="swr_01_1000.html#swr_01_1000__li132430753010">6</a>.</p>
|
||||
<p id="swr_01_1001__p232165943517">2. Image push command</p>
|
||||
<p id="swr_01_1001__p7321159103516"><strong id="swr_01_1001__b34534625322114">ctr image push --user</strong><em id="swr_01_1001__i74343327522114"> [Resource space name]</em> <strong id="swr_01_1001__b172346515122114">@</strong><em id="swr_01_1001__i111054222222114">[AK]</em><strong id="swr_01_1001__b205693874922114">:</strong> <em id="swr_01_1001__i69043242522114">[Login key]</em> <em id="swr_01_1001__i593029522114">[Image repository address]</em></p>
|
||||
<p id="swr_01_1001__p13321115933517">In the command, the resource space name and image repository address are obtained in <a href="swr_01_1000.html#swr_01_1000__li5768123671815">2</a>, the AK in <a href="swr_01_1000.html#swr_01_1000__li1863783911295">3</a>, and the login key in <a href="swr_01_1000.html#swr_01_1000__li132430753010">4</a>.</p>
|
||||
<p id="swr_01_1001__p13321115933517">In the command, the resource space name and image repository address are obtained in <a href="swr_01_1000.html#swr_01_1000__li5768123671815">5</a>, the AK in <a href="swr_01_1000.html#swr_01_1000__li1863783911295">2</a>, and the login key in <a href="swr_01_1000.html#swr_01_1000__li132430753010">6</a>.</p>
|
||||
<div class="note" id="swr_01_1001__note7322185916352"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="swr_01_1001__ul4322459143517"><li id="swr_01_1001__li83221559113512">The login key is encrypted and cannot be decrypted into an SK.</li><li id="swr_01_1001__li232295943517">The commands can be executed on other containerd clients to pull and push images.</li></ul>
|
||||
</div></div>
|
||||
</p></li></ol>
|
||||
|
||||
@ -9,9 +9,9 @@
|
||||
</li><li id="swr_03_0001__li7220559101818"><strong id="swr_03_0001__b92861354142514">Large scale image pull acceleration</strong><p id="swr_03_0001__p1145415391913">SWR uses the image pull acceleration technology to ensure faster image pull for CCE clusters in high concurrency scenarios.</p>
|
||||
</li></ul>
|
||||
</div>
|
||||
<div class="section" id="swr_03_0001__section4302165852015"><h4 class="sectiontitle">Accessing SWR</h4><p id="swr_03_0001__p541813387127">The cloud platform provides a web-based management console and HTTPS-based APIs through which you can access the SWR service.</p>
|
||||
<ul id="swr_03_0001__ul1389995916204"><li id="swr_03_0001__li1789916595201">Using APIs<p id="swr_03_0001__p4899159172017"><a name="swr_03_0001__li1789916595201"></a><a name="li1789916595201"></a>If you want to integrate SWR into a third-party system for secondary development, use APIs to access SWR. For details, see <em id="swr_03_0001__i10518132415420">SWR API Reference</em>.</p>
|
||||
</li><li id="swr_03_0001__li2493165142817">Using the management console<p id="swr_03_0001__en-us_topic_0029125689_p57762686114351"><a name="swr_03_0001__li2493165142817"></a><a name="li2493165142817"></a>Use this mode if you do not want to integrate SWR into a third-party system.</p>
|
||||
<div class="section" id="swr_03_0001__section4302165852015"><h4 class="sectiontitle">Accessing SWR</h4><p id="swr_03_0001__p541813387127">The cloud platform provides a web-based management console and HTTPS-based APIs through which you can access SWR.</p>
|
||||
<ul id="swr_03_0001__ul1389995916204"><li id="swr_03_0001__li1789916595201">Using APIs<p id="swr_03_0001__p4899159172017"><a name="swr_03_0001__li1789916595201"></a><a name="li1789916595201"></a>If you want to integrate SWR into a third-party system for secondary development, use APIs to access SWR. For details, see <em id="swr_03_0001__i10518132415420">SoftWare Repository for Container API Reference</em>.</p>
|
||||
</li><li id="swr_03_0001__li2493165142817">Using the management console<p id="swr_03_0001__en-us_topic_0029125689_p57762686114351"><a name="swr_03_0001__li2493165142817"></a><a name="li2493165142817"></a>For other operations, access SWR through the management console.</p>
|
||||
</li></ul>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
222
docs/swr/umn/swr_03_0005.html
Normal file
222
docs/swr/umn/swr_03_0005.html
Normal file
File diff suppressed because it is too large
Load Diff
@ -1,19 +0,0 @@
|
||||
<a name="swr_03_0020"></a><a name="swr_03_0020"></a>
|
||||
|
||||
<h1 class="topictitle1">Permissions</h1>
|
||||
<div id="body0000001488156484"><p id="swr_03_0020__p0685113015357">If you need to assign different permissions to employees in your enterprise to access your SWR resources, Identity and Access Management (IAM) is a good choice for fine-grained permissions management. IAM provides identity authentication, permissions management, and access control, enabling secure access to your cloud resources.</p>
|
||||
<p id="swr_03_0020__p1384383281811">With IAM, you can use your account to create IAM users, and assign permissions to the users to control their access to specific cloud resources. For example, some software developers in your enterprise need to use SWR resources but should not be allowed to delete the resources or perform any other high-risk operations. In this scenario, you can create IAM users for the software developers and grant them only the permissions required for using SWR resources.</p>
|
||||
<p id="swr_03_0020__p753235631117">If your account does not require individual IAM users for permissions management, skip this section.</p>
|
||||
<p id="swr_03_0020__p13532356101110">IAM can be used free of charge. You pay only for the resources in your account. For more information about IAM, see <a href="https://docs.otc.t-systems.com/en-us/usermanual/iam/iam_01_0026.html" target="_blank" rel="noopener noreferrer">IAM Service Overview</a>.</p>
|
||||
</div>
|
||||
<div>
|
||||
<ul class="ullinks">
|
||||
<li class="ulchildlink"><strong><a href="swr_03_0021.html">SWR Permissions</a></strong><br>
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="swr_pd_index.html">Service Overview</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
@ -1,54 +0,0 @@
|
||||
<a name="swr_03_0021"></a><a name="swr_03_0021"></a>
|
||||
|
||||
<h1 class="topictitle1">SWR Permissions</h1>
|
||||
<div id="body0000001488156664"><p id="swr_03_0021__p153069485316">By default, new IAM users do not have any permissions granted. You need to add them to one or more groups and attach permissions policies or roles to these groups. In this way, the users can inherit permissions from the groups and perform operations on specific cloud resources.</p>
|
||||
<p id="swr_03_0021__p5306134813315">SWR is a project-level service deployed for specific regions. When you set <strong id="swr_03_0021__b178861968524">Scope</strong> to <strong id="swr_03_0021__b14886364524">Region-specific projects</strong> and select projects in specific regions, the users only have permissions for SWR resources in the selected projects. If you set <strong id="swr_03_0021__b1887116195211">Scope</strong> to <strong id="swr_03_0021__b3887136165214">All resources</strong>, the users have permissions for SWR resources in all region-specific projects. When accessing SWR, the users need to switch to the authorized region.</p>
|
||||
|
||||
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="swr_03_0021__table1409182914134" frame="border" border="1" rules="all"><caption><b>Table 1 </b>System-defined permissions for SWR</caption><thead align="left"><tr id="swr_03_0021__row1346222921318"><th align="left" class="cellrowborder" valign="top" width="20.437956204379564%" id="mcps1.3.3.2.4.1.1"><p id="swr_03_0021__p246217292138">Name</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="56.4043595640436%" id="mcps1.3.3.2.4.1.2"><p id="swr_03_0021__p146292918139">Description</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="23.15768423157684%" id="mcps1.3.3.2.4.1.3"><p id="swr_03_0021__p446218291138">Type</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="swr_03_0021__row1462142915137"><td class="cellrowborder" valign="top" width="20.437956204379564%" headers="mcps1.3.3.2.4.1.1 "><p id="swr_03_0021__p1196518294159">SWR Administrator</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="56.4043595640436%" headers="mcps1.3.3.2.4.1.2 "><p id="swr_03_0021__p0462172991319">SWR administrator permissions, including all SWR permissions.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.15768423157684%" headers="mcps1.3.3.2.4.1.3 "><p id="swr_03_0021__p18683113815502">System-defined role</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_03_0021__row112721016495"><td class="cellrowborder" valign="top" width="20.437956204379564%" headers="mcps1.3.3.2.4.1.1 "><p id="swr_03_0021__p1327319168913">Tenant Administrator</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="56.4043595640436%" headers="mcps1.3.3.2.4.1.2 "><p id="swr_03_0021__p10955185614177">Administrator permissions for all services except IAM, including all SWR permissions.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.15768423157684%" headers="mcps1.3.3.2.4.1.3 "><p id="swr_03_0021__p12203918495">System-defined role</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_03_0021__row157318307917"><td class="cellrowborder" valign="top" width="20.437956204379564%" headers="mcps1.3.3.2.4.1.1 "><p id="swr_03_0021__p47312307916">Tenant Guest</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="56.4043595640436%" headers="mcps1.3.3.2.4.1.2 "><p id="swr_03_0021__p147317301899">Read-only permissions for all services except IAM, including permissions such as image pull.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.15768423157684%" headers="mcps1.3.3.2.4.1.3 "><p id="swr_03_0021__p016539184915">System-defined role</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_03_0021__row19269191915109"><td class="cellrowborder" valign="top" width="20.437956204379564%" headers="mcps1.3.3.2.4.1.1 "><p id="swr_03_0021__p172691119131018">ServiceStage Developer</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="56.4043595640436%" headers="mcps1.3.3.2.4.1.2 "><p id="swr_03_0021__p4973747191915">ServiceStage developer permissions, including permissions such as image pull.</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="23.15768423157684%" headers="mcps1.3.3.2.4.1.3 "><p id="swr_03_0021__p112123914497">System-defined role</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<div class="note" id="swr_03_0021__note157450580343"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="swr_03_0021__ul12448704536"><li id="swr_03_0021__li9448130145311">You can <a href="https://docs.otc.t-systems.com/en-us/usermanual/swr/swr_01_0015.html" target="_blank" rel="noopener noreferrer">grant permissions</a> (read, write, and manage permissions), to different users for them to access either a specific image or images in a specific organization.</li></ul>
|
||||
</div></div>
|
||||
</div>
|
||||
<div>
|
||||
<div class="familylinks">
|
||||
<div class="parentlink"><strong>Parent topic:</strong> <a href="swr_03_0020.html">Permissions</a></div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
@ -2,47 +2,52 @@
|
||||
|
||||
<h1 class="topictitle1">Change History</h1>
|
||||
<div id="body0000001200990323">
|
||||
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="swr_change_index__table7396451166" frame="border" border="1" rules="all"><thead align="left"><tr id="swr_change_index__row53961751768"><th align="left" class="cellrowborder" valign="top" width="26.61%" id="mcps1.3.1.1.3.1.1"><p id="swr_change_index__p2565144919815">Release Date</p>
|
||||
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="swr_change_index__table7396451166" frame="border" border="1" rules="all"><thead align="left"><tr id="swr_change_index__row53961751768"><th align="left" class="cellrowborder" valign="top" width="26%" id="mcps1.3.1.1.3.1.1"><p id="swr_change_index__p2565144919815">Release Date</p>
|
||||
</th>
|
||||
<th align="left" class="cellrowborder" valign="top" width="73.39%" id="mcps1.3.1.1.3.1.2"><p id="swr_change_index__p1756514911820">Description</p>
|
||||
<th align="left" class="cellrowborder" valign="top" width="74%" id="mcps1.3.1.1.3.1.2"><p id="swr_change_index__p1756514911820">Description</p>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody><tr id="swr_change_index__row19585628143115"><td class="cellrowborder" valign="top" width="26.61%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p135851828173113">2025-05-21</p>
|
||||
<tbody><tr id="swr_change_index__row139771250184013"><td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p582419572400">2025-07-10</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="73.39%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p1430084723417">Updated:</p>
|
||||
<ul id="swr_change_index__ul109961428114118"><li id="swr_change_index__li1648482120572">Added <a href="swr_01_0102.html">Adding an Image Retention Policy</a>.</li><li id="swr_change_index__li2996628184114">Optimized the structure in <a href="swr_01_0070.html">Permissions Management</a>.</li><li id="swr_change_index__li17941833104111">Added the constraints on shared images in <a href="swr_01_0026.html#swr_01_0026__section15251822105111">Notes and Constraints</a>.</li><li id="swr_change_index__li1115243794213">Fixed known issues.</li></ul>
|
||||
<td class="cellrowborder" valign="top" width="74%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p1897815044013">Added <a href="swr_01_0084.html">SWR Operations Supported by CTS</a>.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_change_index__row15705938995"><td class="cellrowborder" valign="top" width="26.61%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p270516387911">2024-10-31</p>
|
||||
<tr id="swr_change_index__row19585628143115"><td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p135851828173113">2025-05-21</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="73.39%" headers="mcps1.3.1.1.3.1.2 "><ul id="swr_change_index__ul381728194417"><li id="swr_change_index__li1681628164413">Added <a href="swr_03_0020.html">Permissions</a>.</li><li id="swr_change_index__li854123074413">Added <a href="swr_01_1001.html">Obtaining a Long-Term Valid containerd Pull/Push Command</a>.</li><li id="swr_change_index__li25219571051">Added FAQs about topics such as <a href="swr_faq_0039.html">Image Push</a>, <a href="swr_faq_2011.html">Image Pull</a>, and <a href="swr_faq_0038.html">Other FAQs</a>.</li></ul>
|
||||
<td class="cellrowborder" valign="top" width="74%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p1430084723417">Updated:</p>
|
||||
<ul id="swr_change_index__ul109961428114118"><li id="swr_change_index__li1648482120572">Added <a href="swr_01_0102.html">Adding an Image Retention Policy</a>.</li><li id="swr_change_index__li2996628184114">Optimized the structure in <a href="swr_03_0005.html">Permissions</a>.</li><li id="swr_change_index__li17941833104111">Added the constraints on shared images in <a href="swr_01_0026.html#swr_01_0026__section15251822105111">Notes and Constraints</a>.</li><li id="swr_change_index__li1115243794213">Fixed known issues.</li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_change_index__row129724711711"><td class="cellrowborder" valign="top" width="26.61%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p182971447151719">2022-06-09</p>
|
||||
<tr id="swr_change_index__row15705938995"><td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p270516387911">2024-10-31</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="73.39%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p12971147111713">Added permission description in <a href="swr_01_0015.html">User Permissions</a>.</p>
|
||||
<td class="cellrowborder" valign="top" width="74%" headers="mcps1.3.1.1.3.1.2 "><ul id="swr_change_index__ul381728194417"><li id="swr_change_index__li1681628164413">Added <a href="swr_03_0005.html">Permissions</a>.</li><li id="swr_change_index__li854123074413">Added <a href="swr_01_1001.html">Obtaining a Long-Term Valid containerd Pull/Push Command</a>.</li><li id="swr_change_index__li25219571051">Added FAQs about topics such as <a href="swr_faq_0039.html">Image Push</a>, <a href="swr_faq_2011.html">Image Pull</a>, and <a href="swr_faq_0038.html">Other FAQs</a>.</li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_change_index__row133802432912"><td class="cellrowborder" valign="top" width="26.61%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p233852492912">2021-08-30</p>
|
||||
<tr id="swr_change_index__row129724711711"><td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p182971447151719">2022-06-09</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="73.39%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p733892462910">Added <a href="swr_pd_index.html">Service Overview</a> and <a href="swr_faq_index.html">FAQs</a>.</p>
|
||||
<td class="cellrowborder" valign="top" width="74%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p12971147111713">Added permission description in <a href="swr_01_0015.html">User Permissions</a>.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_change_index__row726922242011"><td class="cellrowborder" valign="top" width="26.61%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p0304122482014">2020-06-18</p>
|
||||
<tr id="swr_change_index__row133802432912"><td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p233852492912">2021-08-30</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="73.39%" headers="mcps1.3.1.1.3.1.2 "><ul id="swr_change_index__ul1694741714548"><li id="swr_change_index__li89481417105417">Prerequisites in <a href="swr_01_0011.html">Uploading an Image Through a Container Engine Client</a> are updated.</li><li id="swr_change_index__li2592722155412">Added organization deletion in <a href="swr_01_0014.html">Organization Management</a>.</li></ul>
|
||||
<td class="cellrowborder" valign="top" width="74%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p733892462910">Added <a href="swr_pd_index.html">Service Overview</a> and <a href="swr_faq_index.html">FAQs</a>.</p>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_change_index__row8742171215113"><td class="cellrowborder" valign="top" width="26.61%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p1555916149111">2020-05-26</p>
|
||||
<tr id="swr_change_index__row726922242011"><td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p0304122482014">2020-06-18</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="73.39%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p49326567712">Updated:</p>
|
||||
<td class="cellrowborder" valign="top" width="74%" headers="mcps1.3.1.1.3.1.2 "><ul id="swr_change_index__ul1694741714548"><li id="swr_change_index__li89481417105417">Prerequisites in <a href="swr_01_0011.html">Uploading an Image Through a Container Engine Client</a> are updated.</li><li id="swr_change_index__li2592722155412">Added organization deletion in <a href="swr_01_0014.html">Organization Management</a>.</li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_change_index__row8742171215113"><td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p1555916149111">2020-05-26</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="74%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p49326567712">Updated:</p>
|
||||
<ul id="swr_change_index__ul183981119121015"><li id="swr_change_index__li239818199101"><a href="swr_01_0006.html">Basics of Docker</a></li><li id="swr_change_index__li1951122319138"><a href="swr_01_0011.html">Uploading an Image Through a Container Engine Client</a></li><li id="swr_change_index__li1273823217102"><a href="swr_01_0015.html">Configuring Image Permissions</a></li></ul>
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="swr_change_index__row6849119111214"><td class="cellrowborder" valign="top" width="26.61%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p745612118128">2020-04-21</p>
|
||||
<tr id="swr_change_index__row6849119111214"><td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.1.1.3.1.1 "><p id="swr_change_index__p745612118128">2020-04-21</p>
|
||||
</td>
|
||||
<td class="cellrowborder" valign="top" width="73.39%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p545671116125">This issue is the first official release.</p>
|
||||
<td class="cellrowborder" valign="top" width="74%" headers="mcps1.3.1.1.3.1.2 "><p id="swr_change_index__p545671116125">This issue is the first official release.</p>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
|
||||
@ -7,9 +7,9 @@
|
||||
</div>
|
||||
<div class="section" id="swr_faq_0039__en-us_topic_0000001142249920_section73851936195920"><h4 class="sectiontitle">What Protocol Is Used to Push Images to SWR When I Run the docker push Command?</h4><p id="swr_faq_0039__en-us_topic_0000001142249920_p351103819598">HTTPS is used.</p>
|
||||
</div>
|
||||
<div class="section" id="swr_faq_0039__en-us_topic_0000001142249920_section4834163951313"><h4 class="sectiontitle">Will an Image Be Overwritten If I Push an Image That Have the Same Name and Tag with it?</h4><p id="swr_faq_0039__en-us_topic_0000001142249920_p9334114114130">Yes, the original image will be overwritten.</p>
|
||||
<div class="section" id="swr_faq_0039__en-us_topic_0000001142249920_section4834163951313"><h4 class="sectiontitle">Will an Image Be Overwritten If I Push an Image That Has the Same Name and Tag with it?</h4><p id="swr_faq_0039__en-us_topic_0000001142249920_p9334114114130">Yes. The image will be overwritten.</p>
|
||||
</div>
|
||||
<div class="section" id="swr_faq_0039__en-us_topic_0000001142249920_section161131972618"><h4 class="sectiontitle">What Is the Maximum Size of an SWR Layer?</h4><p id="swr_faq_0039__en-us_topic_0000001142249920_p9400525192611">If you use the container engine client to push images to SWR, each image layer cannot exceed 10 GB.</p>
|
||||
<div class="section" id="swr_faq_0039__en-us_topic_0000001142249920_section161131972618"><h4 class="sectiontitle">What Is the Maximum Size of an Image Layer?</h4><p id="swr_faq_0039__en-us_topic_0000001142249920_p9400525192611">If you use the container engine client to push images to SWR, each image layer cannot exceed 10 GB.</p>
|
||||
</div>
|
||||
<div class="section" id="swr_faq_0039__en-us_topic_0000001142249920_section1989717566515"><h4 class="sectiontitle">What Is the Rate Limit for a Tenant to Push Images over the Internet?</h4><p id="swr_faq_0039__en-us_topic_0000001142249920_p01715461988">To avoid mutual interference between tenants when they push SWR images, the image push traffic for a single tenant is limited to 20 QPS. The traffic exceeding this value will be blocked. In this case, Docker will receive 503 and automatically retry traffic control requests.</p>
|
||||
</div>
|
||||
|
||||
@ -14,7 +14,7 @@
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="swr_03_0007.html">Notes and Constraints</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="swr_03_0020.html">Permissions</a></strong><br>
|
||||
<li class="ulchildlink"><strong><a href="swr_03_0005.html">Permissions</a></strong><br>
|
||||
</li>
|
||||
<li class="ulchildlink"><strong><a href="swr_03_0006.html">Related Services</a></strong><br>
|
||||
</li>
|
||||
|
||||
Reference in New Issue
Block a user