Registry Management

Configure private container registries and visibility

Registry Management Admin

Configure private container registries for chaos scenario images and control which groups can access them. By default, scenarios are pulled from the public Quay.io registry. Private registries enable air-gapped deployments and custom scenario images.

This walkthrough is retained with v1.1.0 documentation and may show an earlier interface.


Creating a Private Registry

Configure a private registry by providing its connection settings (URL, credentials, TLS configuration).


Visibility

Each registry has a visibility setting that controls who can use it:

VisibilityDescription
EveryoneAll users on the platform can select this registry
Group-basedOnly users belonging to assigned groups can see and use this registry

Impact on Scenario Selection

When a user selects a private registry during scenario execution, only the scenarios that have been mirrored to that registry will be available. Scenarios not present in the private registry will not appear in the selection list.

The Operator requires a valid signature for each selected scenario image by default. For the commands and workload-image override, see Mirror Signed Images.

Captured October 13, 2026 from website commit 3b05925.