OpenShift container registry

The OpenShift Container Registry provides visibility into the container images stored within your OpenShift environment. When you deploy the Kubernetes Connector on an OpenShift platform, the system automatically discovers and creates registry instances for monitoring.

When adding an instance of Kubernetes from Data Sources & Integrations, the setting Registry Scanning (OpenShift Only) must be configured to enable automatic scanning of an OpenShift container registry. By default, scanning operates in a concurrency-limited mode (10 images at a time) to minimize resource impact on the cluster while maintaining thorough security coverage.

Manage OpenShift registry instances

You can view and manage the registry instances automatically created by your OpenShift Kubernetes deployment.

• Data source page: Displays a list of all discovered OpenShift registry instances.
• Key details: For each instance, you can quickly see the status, instance name, and associated cluster name.

View instance details

To gain deeper insights into a specific registry, click on one of the instances from the table of the OpenShift Container Registry. This opens a page that includes detailed information about the particular instance.

The detailed dashboard provides the following information:

• Status: The current operational state of the registry instance.
• Kubernetes Connector Status: Indicates the health and connectivity of the connector managing the registry.
• Repositories: The total count of image repositories discovered within the registry.
• Scan Mode: Displays the current scanning configuration.
• Registry Scanning: Shows the real-time status of the cluster. Click on the Status, which navigates you to a dashboard that shows the total number of assets and their current status, and the Health Audits of the specific cluster.

Repository inventory

The instance details page includes a granular list of all repositories found within the OpenShift registry. This list includes:

• Name: The identifier for the specific image repository.
• Repository Type: Categorization of the repository within the OpenShift environment.

Actions

From the top left side of the page, click the More Options () to:

• Exclude/Include images: You can configure scoping rules to include or exclude specific images and repositories from scans based on their names or tags. While updates apply to all future scans, previously excluded images will only be processed during a subsequent system-wide rescan.
• Discover Now: Triggers the discovery and then scanning of newly discovered assets.

Access OpenShift from Kubernetes

You can also view important details about your OpenShift registry from the Kubernetes data source. From the list of clusters in the Kubernetes table, select the OpenShift registry to view:

• Connector Details: Shows last scan, connector status and connector version of the OpenShift platform.
• Cluster Details: Click the link to view the asset card of the OpenShift cluster.
• Deployment Details: Shows deployment method used and the deployment date.