Updating Anthos Config Management using a private registry

Each version of Anthos Config Management has a specific set of versioned images that are required to run it. If you are using a private registry, you need to pull, tag, and push these images to your private registry before you can install Anthos Config Management components or upgrade the Anthos Config Management version.

Adding images to a private registry

To push version-specific Anthos Config Management images to a private registry, click the plus icon for the version that you want to use and complete the listed steps.

1.7.0

To add the images to a private registry, complete the following steps:

  1. Pull the Anthos Config Management images:
    docker pull gcr.io/config-management-release/config-management-operator:20210330235755-op
    docker pull gcr.io/config-management-release/admission-webhook:v1.7.0-rc.5
    docker pull gcr.io/config-management-release/cnrm-controller:0c527ed
    docker pull gcr.io/config-management-release/cnrm-deletiondefender:0c527ed
    docker pull gcr.io/config-management-release/cnrm-recorder:0c527ed
    docker pull gcr.io/config-management-release/cnrm-webhook:0c527ed
    docker pull gcr.io/config-management-release/gatekeeper:anthos1.6.2-6dd505e.g0
    docker pull gcr.io/config-management-release/git-sync:v3.2.2__linux_amd64
    docker pull gcr.io/config-management-release/gke-hc-manager:v0.10.0-hc.0
    docker pull gcr.io/config-management-release/hnc-manager:hnc-v0.7.0-hc.1
    docker pull gcr.io/config-management-release/kube-rbac-proxy:v0.5.0
    docker pull gcr.io/config-management-release/nomos:v1.7.0-rc.5
    docker pull gcr.io/config-management-release/otelcol:v0.22.0
    docker pull gcr.io/config-management-release/otelcontribcol:v0.22.0
    docker pull gcr.io/config-management-release/reconciler-manager:v1.7.0-rc.5
    docker pull gcr.io/config-management-release/reconciler:v1.7.0-rc.5
    docker pull gcr.io/config-management-release/resource-group-controller:v0.7.0
    
  2. Create a variable for your private registry URL:
    export PRIVATE_REGISTRY_URL=PRIVATE_REGISTRY_URL
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  3. Tag the images with your private registry URL:
    docker tag gcr.io/config-management-release/config-management-operator:20210330235755-op \
     ${PRIVATE_REGISTRY_URL}/config-management-operator:20210330235755-op
    docker tag gcr.io/config-management-release/admission-webhook:v1.7.0-rc.5 \
     ${PRIVATE_REGISTRY_URL}/admission-webhook:v1.7.0-rc.5
    docker tag gcr.io/config-management-release/cnrm-controller:0c527ed \
     ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker tag gcr.io/config-management-release/cnrm-deletiondefender:0c527ed \
     ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker tag gcr.io/config-management-release/cnrm-recorder:0c527ed \
     ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker tag gcr.io/config-management-release/cnrm-webhook:0c527ed \
     ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker tag gcr.io/config-management-release/gatekeeper:anthos1.6.2-6dd505e.g0 \
     ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.6.2-6dd505e.g0
    docker tag gcr.io/config-management-release/git-sync:v3.2.2__linux_amd64 \
     ${PRIVATE_REGISTRY_URL}/git-sync:v3.2.2__linux_amd64
    docker tag gcr.io/config-management-release/gke-hc-manager:v0.10.0-hc.0 \
     ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.10.0-hc.0
    docker tag gcr.io/config-management-release/hnc-manager:hnc-v0.7.0-hc.1 \
     ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.7.0-hc.1
    docker tag gcr.io/config-management-release/kube-rbac-proxy:v0.5.0 \
     ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker tag gcr.io/config-management-release/nomos:v1.7.0-rc.5 \
     ${PRIVATE_REGISTRY_URL}/nomos:v1.7.0-rc.5
    docker tag gcr.io/config-management-release/otelcol:v0.22.0 \
     ${PRIVATE_REGISTRY_URL}/otelcol:v0.22.0
    docker tag gcr.io/config-management-release/otelcontribcol:v0.22.0 \
     ${PRIVATE_REGISTRY_URL}/otelcontribcol:v0.22.0
    docker tag gcr.io/config-management-release/reconciler-manager:v1.7.0-rc.5 \
     ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.7.0-rc.5
    docker tag gcr.io/config-management-release/reconciler:v1.7.0-rc.5 \
     ${PRIVATE_REGISTRY_URL}/reconciler:v1.7.0-rc.5
    docker tag gcr.io/config-management-release/resource-group-controller:v0.7.0 \
     ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.7.0
    
  4. Push the tagged images to your private registry:
    docker push ${PRIVATE_REGISTRY_URL}/config-management-operator:20210209202053-op
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.6.2-6dd505e.g0
    docker push ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker push ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.10.0-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.7.0-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker push ${PRIVATE_REGISTRY_URL}/nomos:v1.6.2-rc.2
    docker push ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.6.2-rc.2
    docker push ${PRIVATE_REGISTRY_URL}/reconciler:v1.6.2-rc.2
    docker push ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.5.1
    

If you can pull the tagged images from your private registry, then the procedure was successful.

1.6.2

To add the images to a private registry, complete the following steps:

  1. Pull the Anthos Config Management images:
    docker pull gcr.io/config-management-release/config-management-operator:20210209202053-op
    docker pull gcr.io/config-management-release/cnrm-controller:0c527ed
    docker pull gcr.io/config-management-release/cnrm-deletiondefender:0c527ed
    docker pull gcr.io/config-management-release/cnrm-recorder:0c527ed
    docker pull gcr.io/config-management-release/cnrm-webhook:0c527ed
    docker pull gcr.io/config-management-release/gatekeeper:anthos1.6.2-6dd505e.g0
    docker pull gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64
    docker pull gcr.io/config-management-release/gke-hc-manager:v0.10.0-hc.0
    docker pull gcr.io/config-management-release/hnc-manager:hnc-v0.7.0-hc.0
    docker pull gcr.io/config-management-release/kube-rbac-proxy:v0.5.0
    docker pull gcr.io/config-management-release/nomos:v1.6.2-rc.2
    docker pull gcr.io/config-management-release/reconciler-manager:v1.6.2-rc.2
    docker pull gcr.io/config-management-release/reconciler:v1.6.2-rc.2
    docker pull gcr.io/config-management-release/resource-group-controller:v0.5.1
    
  2. Create a variable for your private registry URL:
    export PRIVATE_REGISTRY_URL=PRIVATE_REGISTRY_URL
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  3. Tag the images with your private registry URL:
    docker tag gcr.io/config-management-release/config-management-operator:20210209202053-op \
        ${PRIVATE_REGISTRY_URL}/config-management-operator:20210209202053-op
    docker tag gcr.io/config-management-release/cnrm-controller:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker tag gcr.io/config-management-release/cnrm-deletiondefender:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker tag gcr.io/config-management-release/cnrm-recorder:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker tag gcr.io/config-management-release/cnrm-webhook:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker tag gcr.io/config-management-release/gatekeeper:anthos1.6.2-6dd505e.g0 \
        ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.6.2-6dd505e.g0
    docker tag gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64 \
        ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker tag gcr.io/config-management-release/gke-hc-manager:v0.10.0-hc.0 \
        ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.10.0-hc.0
    docker tag gcr.io/config-management-release/hnc-manager:hnc-v0.7.0-hc.0 \
        ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.7.0-hc.0
    docker tag gcr.io/config-management-release/kube-rbac-proxy:v0.5.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker tag gcr.io/config-management-release/nomos:v1.6.2-rc.2 \
        ${PRIVATE_REGISTRY_URL}/nomos:v1.6.2-rc.2
    docker tag gcr.io/config-management-release/reconciler-manager:v1.6.2-rc.2 \
        ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.6.2-rc.2
    docker tag gcr.io/config-management-release/reconciler:v1.6.2-rc.2 \
        ${PRIVATE_REGISTRY_URL}/reconciler:v1.6.2-rc.2
    docker tag gcr.io/config-management-release/resource-group-controller:v0.5.1 \
        ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.5.1
    
  4. Push the tagged images to your private registry:
    docker push ${PRIVATE_REGISTRY_URL}/config-management-operator:20210209202053-op
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.6.2-6dd505e.g0
    docker push ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker push ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.10.0-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.7.0-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker push ${PRIVATE_REGISTRY_URL}/nomos:v1.6.2-rc.2
    docker push ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.6.2-rc.2
    docker push ${PRIVATE_REGISTRY_URL}/reconciler:v1.6.2-rc.2
    docker push ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.5.1
    

If you can pull the tagged images from your private registry, then the procedure was successful.

1.6.1

To add the images to a private registry, complete the following steps:

  1. Pull the Anthos Config Management images:
    docker pull gcr.io/config-management-release/config-management-operator:20210112004802-op
    docker pull gcr.io/config-management-release/cnrm-controller:0c527ed
    docker pull gcr.io/config-management-release/cnrm-deletiondefender:0c527ed
    docker pull gcr.io/config-management-release/cnrm-recorder:0c527ed
    docker pull gcr.io/config-management-release/cnrm-webhook:0c527ed
    docker pull gcr.io/config-management-release/gatekeeper:anthos1.6.1-5610c59.g0
    docker pull gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64
    docker pull gcr.io/config-management-release/gke-hc-manager:v0.7.0-hc.0
    docker pull gcr.io/config-management-release/hnc-manager:hnc-v0.7.0-hc.0
    docker pull gcr.io/config-management-release/kube-rbac-proxy:v0.5.0
    docker pull gcr.io/config-management-release/nomos:v1.6.1-rc.4
    docker pull gcr.io/config-management-release/reconciler-manager:v1.6.1-rc.4
    docker pull gcr.io/config-management-release/reconciler:v1.6.1-rc.4
    docker pull gcr.io/config-management-release/resource-group-controller:v0.5.1
    
  2. Create a variable for your private registry URL:
    export PRIVATE_REGISTRY_URL=PRIVATE_REGISTRY_URL
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  3. Tag the images with your private registry URL:
    docker tag gcr.io/config-management-release/config-management-operator:20210112004802-op \
        ${PRIVATE_REGISTRY_URL}/config-management-operator:20210112004802-op docker tag gcr.io/config-management-release/cnrm-controller:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker tag gcr.io/config-management-release/cnrm-deletiondefender:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker tag gcr.io/config-management-release/cnrm-recorder:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker tag gcr.io/config-management-release/cnrm-webhook:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker tag gcr.io/config-management-release/gatekeeper:anthos1.6.1-5610c59.g0 \
        ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.6.1-5610c59.g0
    docker tag gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64 \
        ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker tag gcr.io/config-management-release/gke-hc-manager:v0.7.0-hc.0 \
        ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.7.0-hc.0
    docker tag gcr.io/config-management-release/hnc-manager:hnc-v0.7.0-hc.0 \
        ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.7.0-hc.0
    docker tag gcr.io/config-management-release/kube-rbac-proxy:v0.5.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker tag gcr.io/config-management-release/nomos:v1.6.1-rc.4 \
        ${PRIVATE_REGISTRY_URL}/nomos:v1.6.1-rc.4
    docker tag gcr.io/config-management-release/reconciler-manager:v1.6.1-rc.4 \
        ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.6.1-rc.4
    docker tag gcr.io/config-management-release/reconciler:v1.6.1-rc.4 \
        ${PRIVATE_REGISTRY_URL}/reconciler:v1.6.1-rc.4
    docker tag gcr.io/config-management-release/resource-group-controller:v0.5.1 \
        ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.5.1
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  4. Push the tagged images to your private registry:
    docker push ${PRIVATE_REGISTRY_URL}/config-management-operator:20210112004802-op
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.6.1-5610c59.g0
    docker push ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker push ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.7.0-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.7.0-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker push ${PRIVATE_REGISTRY_URL}/nomos:v1.6.1-rc.4
    docker push ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.6.1-rc.4
    docker push ${PRIVATE_REGISTRY_URL}/reconciler:v1.6.1-rc.4
    docker push ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.5.1
    

If you can pull the tagged images from your private registry, then the procedure was successful.

1.6.0

To add the images to a private registry, complete the following steps:

  1. Pull the Anthos Config Management images:
    docker pull gcr.io/config-management-release/config-management-operator:20201118213152-op
    docker pull gcr.io/config-management-release/cnrm-controller:0c527ed
    docker pull gcr.io/config-management-release/cnrm-deletiondefender:0c527ed
    docker pull gcr.io/config-management-release/cnrm-recorder:0c527ed
    docker pull gcr.io/config-management-release/cnrm-webhook:0c527ed
    docker pull gcr.io/config-management-release/gatekeeper:anthos1.6.0-acd32ec7.g1
    docker pull gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64
    docker pull gcr.io/config-management-release/gke-hc-manager:v0.6.0-hc.0
    docker pull gcr.io/config-management-release/hnc-manager:hnc-v0.6.0-hc.1
    docker pull gcr.io/config-management-release/kube-rbac-proxy:v0.5.0
    docker pull gcr.io/config-management-release/nomos:v1.6.0-rc.3
    docker pull gcr.io/config-management-release/reconciler-manager:v1.6.0-rc.3
    docker pull gcr.io/config-management-release/reconciler:v1.6.0-rc.3
    docker pull gcr.io/config-management-release/resource-group-controller:v0.5.1
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.4.1
    
  2. Create a variable for your private registry URL:
    export PRIVATE_REGISTRY_URL=PRIVATE_REGISTRY_URL
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  3. Tag the images with your private registry URL:
    docker tag gcr.io/config-management-release/config-management-operator:20201118213152-op \
        ${PRIVATE_REGISTRY_URL}/config-management-operator:20201118213152-op
    docker tag gcr.io/config-management-release/cnrm-controller:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker tag gcr.io/config-management-release/cnrm-deletiondefender:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker tag gcr.io/config-management-release/cnrm-recorder:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker tag gcr.io/config-management-release/cnrm-webhook:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker tag gcr.io/config-management-release/gatekeeper:anthos1.6.0-acd32ec7.g1 \
        ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.6.0-acd32ec7.g1
    docker tag gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64 \
        ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker tag gcr.io/config-management-release/gke-hc-manager:v0.6.0-hc.0 \
        ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.6.0-hc.0
    docker tag gcr.io/config-management-release/hnc-manager:hnc-v0.6.0-hc.1 \
        ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.6.0-hc.1
    docker tag gcr.io/config-management-release/kube-rbac-proxy:v0.5.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker tag gcr.io/config-management-release/nomos:v1.6.0-rc.3 \
        ${PRIVATE_REGISTRY_URL}/nomos:v1.6.0-rc.3
    docker tag gcr.io/config-management-release/reconciler-manager:v1.6.0-rc.3 \
        ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.6.0-rc.3
    docker tag gcr.io/config-management-release/reconciler:v1.6.0-rc.3 \
        ${PRIVATE_REGISTRY_URL}/reconciler:v1.6.0-rc.3
    docker tag gcr.io/config-management-release/resource-group-controller:v0.5.1 \
        ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.5.1
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.0
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.4.1 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.1
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  4. Push the tagged images to your private registry:
    docker push ${PRIVATE_REGISTRY_URL}/config-management-operator:20201118213152-op
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.6.0-acd32ec7.g1
    docker push ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker push ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.6.0-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.6.0-hc.1
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker push ${PRIVATE_REGISTRY_URL}/nomos:v1.6.0-rc.3
    docker push ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.6.0-rc.3
    docker push ${PRIVATE_REGISTRY_URL}/reconciler:v1.6.0-rc.3
    docker push ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.5.1
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.0
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.1
    

If you can pull the tagged images from your private registry, then the procedure was successful.

1.5.2

To add the images to a private registry, complete the following steps:

  1. Pull the Anthos Config Management images:
    docker pull gcr.io/config-management-release/config-management-operator:20201031033402-op
    docker pull gcr.io/config-management-release/cnrm-controller:0c527ed
    docker pull gcr.io/config-management-release/cnrm-deletiondefender:0c527ed
    docker pull gcr.io/config-management-release/cnrm-recorder:0c527ed
    docker pull gcr.io/config-management-release/cnrm-webhook:0c527ed
    docker pull gcr.io/config-management-release/gatekeeper:anthos1.5.0-15d56e3.g0
    docker pull gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64
    docker pull gcr.io/config-management-release/gke-hc-manager:v0.6.0-hc.0
    docker pull gcr.io/config-management-release/hnc-manager:hnc-v0.6.0-hc.1
    docker pull gcr.io/config-management-release/kube-rbac-proxy:v0.5.0
    docker pull gcr.io/config-management-release/nomos:v1.5.2-rc.10
    docker pull gcr.io/config-management-release/reconciler-manager:v1.5.2-rc.10
    docker pull gcr.io/config-management-release/reconciler:v1.5.2-rc.10
    docker pull gcr.io/config-management-release/resource-group-controller:v0.5.1
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.4.1
    
  2. Create a variable for your private registry URL:
    export PRIVATE_REGISTRY_URL=PRIVATE_REGISTRY_URL
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  3. Tag the images with your private registry URL:
    docker tag gcr.io/config-management-release/config-management-operator:20201031033402-op \
        ${PRIVATE_REGISTRY_URL}/config-management-operator:20201031033402-op
    docker tag gcr.io/config-management-release/cnrm-controller:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker tag gcr.io/config-management-release/cnrm-deletiondefender:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker tag gcr.io/config-management-release/cnrm-recorder:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker tag gcr.io/config-management-release/cnrm-webhook:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker tag gcr.io/config-management-release/gatekeeper:anthos1.5.0-15d56e3.g0 \
        ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.5.0-15d56e3.g0
    docker tag gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64 \
        ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker tag gcr.io/config-management-release/gke-hc-manager:v0.6.0-hc.0 \
        ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.6.0-hc.0
    docker tag gcr.io/config-management-release/hnc-manager:hnc-v0.6.0-hc.1 \
        ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.6.0-hc.1
    docker tag gcr.io/config-management-release/kube-rbac-proxy:v0.5.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker tag gcr.io/config-management-release/nomos:v1.5.2-rc.10 \
        ${PRIVATE_REGISTRY_URL}/nomos:v1.5.2-rc.10
    docker tag gcr.io/config-management-release/reconciler-manager:v1.5.2-rc.10 \
        ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.5.2-rc.10
    docker tag gcr.io/config-management-release/reconciler:v1.5.2-rc.10 \
        ${PRIVATE_REGISTRY_URL}/reconciler:v1.5.2-rc.10
    docker tag gcr.io/config-management-release/resource-group-controller:v0.5.1 \
        ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.5.1
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.0
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.4.1 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.1
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  4. Push the tagged images to your private registry:
    docker push ${PRIVATE_REGISTRY_URL}/config-management-operator:20201031033402-op
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.5.0-15d56e3.g0
    docker push ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker push ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.6.0-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.6.0-hc.1
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    docker push ${PRIVATE_REGISTRY_URL}/nomos:v1.5.2-rc.10
    docker push ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.5.2-rc.10
    docker push ${PRIVATE_REGISTRY_URL}/reconciler:v1.5.2-rc.10
    docker push ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.5.1
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.0
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.1
    

If you can pull the tagged images from your private registry, then the procedure was successful.

1.5.1

To add the images to a private registry, complete the following steps:

  1. Pull the Anthos Config Management images:
    docker pull gcr.io/config-management-release/config-management-operator:20201007005948-op
    docker pull gcr.io/config-management-release/cnrm-controller:0c527ed
    docker pull gcr.io/config-management-release/cnrm-deletiondefender:0c527ed
    docker pull gcr.io/config-management-release/cnrm-recorder:0c527ed
    docker pull gcr.io/config-management-release/cnrm-webhook:0c527ed
    docker pull gcr.io/config-management-release/gatekeeper:anthos1.5.0-15d56e3.g0
    docker pull gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64
    docker pull gcr.io/config-management-release/gke-hc-manager:v0.5.3-hc.0
    docker pull gcr.io/config-management-release/hnc-manager:hnc-v0.5.3-hc.0
    docker pull gcr.io/config-management-release/nomos:v1.5.1-rc.7
    docker pull gcr.io/config-management-release/reconciler-manager:v1.5.1-rc.7
    docker pull gcr.io/config-management-release/reconciler:v1.5.1-rc.7
    docker pull gcr.io/config-management-release/resource-group-controller:v0.4.0
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.4.1
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
    
  2. Create a variable for your private registry URL:
    export PRIVATE_REGISTRY_URL=PRIVATE_REGISTRY_URL
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  3. Tag the images with your private registry URL:
    docker tag gcr.io/config-management-release/config-management-operator:20201007005948-op \
        ${PRIVATE_REGISTRY_URL}/config-management-operator:20201007005948-op
    docker tag gcr.io/config-management-release/cnrm-controller:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker tag gcr.io/config-management-release/cnrm-deletiondefender:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker tag gcr.io/config-management-release/cnrm-recorder:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker tag gcr.io/config-management-release/cnrm-webhook:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker tag gcr.io/config-management-release/gatekeeper:anthos1.5.0-15d56e3.g0 \
        ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.5.0-15d56e3.g0
    docker tag gcr.io/config-management-release/git-sync:v3.1.6-gke.1__linux_amd64 \
        ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker tag gcr.io/config-management-release/gke-hc-manager:v0.5.3-hc.0 \
        ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.5.3-hc.0
    docker tag gcr.io/config-management-release/hnc-manager:hnc-v0.5.3-hc.0 \
        ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.5.3-hc.0
    docker tag gcr.io/config-management-release/nomos:v1.5.1-rc.7 \
        ${PRIVATE_REGISTRY_URL}/nomos:v1.5.1-rc.7
    docker tag gcr.io/config-management-release/reconciler-manager:v1.5.1-rc.7 \
        ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.5.1-rc.7
    docker tag gcr.io/config-management-release/reconciler:v1.5.1-rc.7 \
        ${PRIVATE_REGISTRY_URL}/reconciler:v1.5.1-rc.7
    docker tag gcr.io/config-management-release/resource-group-controller:v0.4.0 \
        ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.4.0
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.0
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.4.1 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.1
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  4. Push the tagged images to your private registry:
    docker push ${PRIVATE_REGISTRY_URL}/config-management-operator:20201007005948-op
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.5.0-15d56e3.g0
    docker push ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.1__linux_amd64
    docker push ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.5.3-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.5.3-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/nomos:v1.5.1-rc.7
    docker push ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.5.1-rc.7
    docker push ${PRIVATE_REGISTRY_URL}/reconciler:v1.5.1-rc.7
    docker push ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.4.0
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.0
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.1
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    

If you can pull the tagged images from your private registry, then the procedure was successful.

1.5.0

To add the images to a private registry, complete the following steps:

  1. Pull the Anthos Config Management images:
    docker pull gcr.io/config-management-release/config-management-operator:20200912002329-op
    docker pull gcr.io/config-management-release/cnrm-controller:0c527ed
    docker pull gcr.io/config-management-release/cnrm-deletiondefender:0c527ed
    docker pull gcr.io/config-management-release/cnrm-recorder:0c527ed
    docker pull gcr.io/config-management-release/cnrm-webhook:0c527ed
    docker pull gcr.io/config-management-release/gatekeeper:anthos1.5.0-15d56e3.g0
    docker pull gcr.io/config-management-release/git-sync:v3.1.6-gke.0__linux_amd64
    docker pull gcr.io/config-management-release/gke-hc-manager:v0.5.2-hc.0
    docker pull gcr.io/config-management-release/hnc-manager:hnc-v0.5.2-hc.0
    docker pull gcr.io/config-management-release/nomos:v1.5.0-rc.41
    docker pull gcr.io/config-management-release/reconciler-manager:v1.5.0-rc.41
    docker pull gcr.io/config-management-release/reconciler:v1.5.0-rc.41
    docker pull gcr.io/config-management-release/resource-group-controller:v0.4.0
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.4.1
    docker pull gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
    
  2. Create a variable for your private registry URL:
    export PRIVATE_REGISTRY_URL=PRIVATE_REGISTRY_URL
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  3. Tag the images with your private registry URL:
    docker tag gcr.io/config-management-release/config-management-operator:20200912002329-op \
        ${PRIVATE_REGISTRY_URL}/config-management-operator:20200912002329-op
    docker tag gcr.io/config-management-release/cnrm-controller:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker tag gcr.io/config-management-release/cnrm-deletiondefender:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker tag gcr.io/config-management-release/cnrm-recorder:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker tag gcr.io/config-management-release/cnrm-webhook:0c527ed \
        ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker tag gcr.io/config-management-release/gatekeeper:anthos1.5.0-15d56e3.g0 \
        ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.5.0-15d56e3.g0
    docker tag gcr.io/config-management-release/git-sync:v3.1.6-gke.0__linux_amd64 \
        ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.0__linux_amd64
    docker tag gcr.io/config-management-release/gke-hc-manager:v0.5.2-hc.0 \
        ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.5.2-hc.0
    docker tag gcr.io/config-management-release/hnc-manager:hnc-v0.5.2-hc.0 \
        ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.5.2-hc.0
    docker tag gcr.io/config-management-release/nomos:v1.5.0-rc.41 \
        ${PRIVATE_REGISTRY_URL}/nomos:v1.5.0-rc.41
    docker tag gcr.io/config-management-release/reconciler-manager:v1.5.0-rc.41 \
        ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.5.0-rc.41
    docker tag gcr.io/config-management-release/reconciler:v1.5.0-rc.41 \
        ${PRIVATE_REGISTRY_URL}/reconciler:v1.5.0-rc.41
    docker tag gcr.io/config-management-release/resource-group-controller:v0.4.0 \
        ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.4.0
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.4.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.0
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.4.1 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.1
    docker tag gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0 \
        ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    
    Replace PRIVATE_REGISTRY_URL with your private registry URL.
  4. Push the tagged images to your private registry:
    docker push ${PRIVATE_REGISTRY_URL}/config-management-operator:20200912002329-op
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-controller:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-deletiondefender:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-recorder:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/cnrm-webhook:0c527ed
    docker push ${PRIVATE_REGISTRY_URL}/gatekeeper:anthos1.5.0-15d56e3.g0
    docker push ${PRIVATE_REGISTRY_URL}/git-sync:v3.1.6-gke.0__linux_amd64
    docker push ${PRIVATE_REGISTRY_URL}/gke-hc-manager:v0.5.2-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/hnc-manager:hnc-v0.5.2-hc.0
    docker push ${PRIVATE_REGISTRY_URL}/nomos:v1.5.0-rc.41
    docker push ${PRIVATE_REGISTRY_URL}/reconciler-manager:v1.5.0-rc.41
    docker push ${PRIVATE_REGISTRY_URL}/reconciler:v1.5.0-rc.41
    docker push ${PRIVATE_REGISTRY_URL}/resource-group-controller:v0.4.0
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.0
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.4.1
    docker push ${PRIVATE_REGISTRY_URL}/kube-rbac-proxy:v0.5.0
    

If you can pull the tagged images from your private registry, then the procedure was successful.