Private registries

Your cluster has its own registry built in. This page is about everyone else's.

Pulling private images

To run images from a private external registry (ghcr.io, Docker Hub private repos, a company registry), store a login once per context:

jekyo registry login ghcr.io
Username: you
Password/token: ****

From then on, any app referencing ghcr.io/... images gets pull access automatically:

services:
  api:
    image: ghcr.io/acme/private-api:2.1
    port: 8080

On jekyo up, JEKYO creates the pull secret in the app's namespace and wires it to the workloads. Only for registries the app actually references, never more.

jekyo registry logout ghcr.io   # remove a stored login

The built-in registry

For images JEKYO builds, none of this applies: the cluster's own registry (in kube-system, authenticated, on persistent storage) is configured at install time and used automatically. See Building images.

Credentials for it are in jekyo context show if you ever want to push to it directly with other tools.