IBM Cloud Docs
Container Registry discontinues registry tokens for authentication on 19 August 2021

Container Registry discontinues registry tokens for authentication on 19 August 2021

From 19 August 2021, any IBM Cloud® Container Registry pulls that use registry tokens stop working, including pulls from IBM Cloud Kubernetes Service and Red Hat® OpenShift® on IBM Cloud®. Any Container Registry pushes that use registry tokens from CI pipelines also stop working.

The original announcement was published on 28 May 2021.

The discontinuation of registry tokens as an authentication mechanism for IBM Cloud Container Registry was announced in June 2019 as Container Registry moved to a more secure IAM API key approach. This announcement is also aligned to the icr.io domain name changes. A further announcement was issued in February 2020 about Container Registry not accepting registry tokens for authentication.

What actions you must take by 19 August 2021

You must automate access to your Container Registry namespaces so that you can push and pull images by using IBM Cloud® Identity and Access Management (IAM) by 19 August 2021.

Learn more

For more information about how to automate access to your Container Registry namespaces see the following topics.