feat(registries): add private registry credential management (Team Pro) (#240)

Browse Source

Add centralized credential storage for private Docker registries with
support for Docker Hub, GHCR, AWS ECR, and self-hosted registries.

- New `registries` table with AES-256-GCM encrypted secrets
- RegistryService with CRUD, test connectivity, Docker config generation
- 5 API endpoints gated by requireTeamPro + requireAdmin
- ComposeService injects credentials via temp DOCKER_CONFIG on deploy/pull
- ImageUpdateService passes stored credentials for private registry checks
- AWS ECR just-in-time token refresh via @aws-sdk/client-ecr
- RegistriesSection UI in Settings Hub with type-aware form
- Documentation with screenshots

...

This commit is contained in:

Anso

2026-03-29 12:56:30 -04:00

committed by GitHub

parent 362b4a43d0

commit 244c83a0c3

16 changed files with 2317 additions and 20 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

docs/images/private-registries/registries-add-form.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 56 KiB

docs/images/private-registries/registries-overview.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 47 KiB

docs/images/private-registries/registries-with-entry.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 48 KiB