What is the difference between Cluster registry and Global registry?
This document (000020015) is provided subject to the disclaimer at the end of this document.
Environment
- Rancher 2.6.x,Rancher 2.7.x and Rancher 2.8.x
Situation
Q) What is the difference between a global registry Vs a cluster-wide registry? Where would I use one over the other? - Global Registry :
Global-level private registries allow administrators to store or proxy images through a centralized image repository. Global registries allow for air-gapped setups to pull images needed for cluster provisioning and end-user workloads without specifying the private registry server. This registry is used as the default pull location in place of DockerHub. The global private registry does not support image repositories requiring authentication. Use cluster-level registries if you need to authenticate against your image repository during cluster provisioning. Use registries within the cluster if you need to authenticate against your image repository for end-user workloads.
Ref : Docs to Global private registry configuration
- Cluster Registry
Cluster-level private registries allow administrators to use a registry server with RKE-based clusters to provision system components required to run Kubernetes. One can find the List of system images here. Administrators can pass in credentials if the registry server requires them. Outside of the RKE system images and RKE add-ons, the Rancher agent image used in cluster provisioning will use the cluster-level registry for custom clusters. Eventually, node drivers will also pull the Rancher agent image from the cluster-level registry.
Note:
There are specific images not covered by the cluster-level private registry that are part of the cluster provisioning process. Your cluster will need access to either DockerHub or have these images in your global registry (eg Busybox, shell, and pause)
Disclaimer
This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.