Repository settings
Set a repository's visibility, make tags immutable, add retention rules to delete old tags automatically, choose which clusters can pull, or delete it.
Open a repository and go to its Settings tab.
Visibility
- Private: only your team, robot tokens and connected clusters can pull.
- Public: anyone on the internet can pull without signing in. Don't bake secrets, API keys or licensed software into public images.
Immutable tags
With Immutable tags on, a pushed tag can't be overwritten: a push over an existing tag is undone. Use a new tag for each build, such as the commit's short SHA.
Retention rules
Retention rules delete old tags automatically. A tag is deleted if any rule matches, and each repository can have up to 5 rules:
| Rule | What it does |
|---|---|
| Keep only the newest N tags | Deletes older tags beyond N |
| Delete untagged images after N days | Removes images no tag points to |
| Delete tags matching a pattern after N days | For example pr-* after 14 days |
Rules run every night at 03:40 UTC, and the newest tag is always kept. Without rules, every tag is kept until you delete it.
Garbage collection
When a tag moves to a new image, the old layers are left with nothing pointing to them. The registry removes these untagged layers every 7 days. Tagged images are only deleted by retention rules or by you.
Pull access
Your team can always pull and push. Under Pull access, choose which Kubernetes clusters can pull this repository too. See Use with Pipelines and Kubernetes.
Delete a repository
In the Danger zone, select Delete repository and type the name to confirm. This permanently deletes every tag and image layer in it. Clusters and jobs pulling these images will fail to pull new copies. This can't be undone.
Related
Vulnerability scanning
Turn on vulnerability scanning for your Container Registry to check images for known issues in OS packages and libraries on push, on request and every week.
Storage and billing
How Container Registry storage is measured and billed per GB each month above the included amount, and how to keep your storage down with retention rules.