Docker Registry
Integrate a Docker-compatible registry with Cloudaware to discover container repositories, images, containers, and related runtime vulnerability data in the CMDB.
- Audience: Cloudaware administrators, container platform teams, DevOps/SecOps teams
- Outcome: Docker Registry objects are available in Cloudaware for container inventory, vulnerability visibility, and reporting
Capabilities
The integration supports:
- Discovery of Docker-compatible registry repositories and images
- Inventory of Docker containers and repository-image relationships in the CMDB
- Runtime vulnerability visibility for supported Docker registry data
- Search and reporting for Docker Registry objects using CMDB Navigator, CMDB list views, and reports
Prerequisites
Before you begin, make sure you have:
- Access to a Cloudaware account.
- A user with access to the Admin Console and permissions to manage integrations.
- A Docker-compatible registry base URL.
- Registry credentials with at least pull/read permissions.
- Network access from Cloudaware to the registry URL.
Add Docker Registry Credentials
To connect Docker Registry credentials to Cloudaware:
- In Cloudaware, go to Admin.
- Find Docker Registry in Container Infrastructure integrations, then click + ADD.
- Enter the following values:
- URL: Enter the base URL of the Docker-compatible registry, including
https://. Do not include an image name or tag. - Username: Enter the registry user or service account with at least pull/read permissions.
- Password: Enter the password or token associated with the username. For token-based registries, paste the token here instead of an interactive login password.
- URL: Enter the base URL of the Docker-compatible registry, including
- Click SAVE.
- Verify the integration status.
A green status indicator means the integration is configured successfully. If the status indicator is red, contact Cloudaware Support at support@cloudaware.com.
View Docker Registry Data in CMDB
To browse discovered Docker Registry objects:
- In Cloudaware, open CMDB Navigator.
- In the left pane, select the Docker Registry object area.
- Open Docker containers, images, repositories, repository images, or runtime vulnerabilities to view records.
Supported Objects
Cloudaware supports the following Docker Registry objects:
| Docker Registry Object | CMDB Object API Name |
|---|---|
| Docker Container | CA10__CaDockerContainer__c |
| Docker Image | CA10__CaDockerImage__c |
| Docker Repository | CA10__CaDockerRepository__c |
| Docker Repository Image | CA10__CaDockerRepositoryImage__c |
| Docker Runtime Vulnerability | CA10__CaDockerRuntimeVulnerability__c |
Troubleshooting
Initial data collection may take time to complete after the integration is saved.
Integration Shows Red Status
- Confirm that the registry URL is a base URL and includes
https://. - Confirm that the URL does not include an image name, tag, or repository path that Cloudaware cannot use as a registry endpoint.
- Verify that the username and password/token are correct.
- Confirm that the registry user or service account has at least pull/read permissions.
- Check whether the registry allows access from Cloudaware.
Docker Registry Objects Are Missing
- Allow the initial discovery cycle to complete.
- Confirm that the registry account can list the expected repositories and images.
- Verify that the registry URL points to the intended registry environment.
- In CMDB Navigator, confirm that you are viewing the Docker Registry object lists.
Still stuck? Contact Cloudaware Support at support@cloudaware.com with the integration name and a brief description of the issue.
Reconfigure or Remove the Integration
To rotate credentials or update the registry URL, edit the existing integration instead of deleting and re-creating it.
Update the Integration Details
- Go to Admin.
- Select Docker Registry.
- Select the specific integration.
- Open the three-dot menu, then click Edit.
- Update the required fields.
- Click Save.
Remove the Integration from Cloudaware
- Go to Admin.
- Select Docker Registry.
- Select the specific integration.
- Open the three-dot menu, then click Delete.
- Confirm the deletion if prompted.
Security Notes
- Use a dedicated registry user or service account for Cloudaware discovery.
- Grant only the minimum pull/read permissions required for inventory collection.
- Use tokens instead of interactive user passwords when the registry supports token-based authentication.
- Rotate registry credentials according to your organization's credential-rotation policy.
- Update the Cloudaware integration immediately if a registry password or token is revoked, regenerated, or replaced.