--- schema_version: "1" id: 99e03dda18c8f93951d46e17eefd4f28034ac81beb2f75a70344aed610fcc529 title: Using a Local Registry with Runtime Fabric collection: mulesoft version: current locale: en-us portal_url: https://docs.salesforce.com/mulesoft/current/en-us/runtime-fabric/2.11/configure-local-registry.md canonical_url: https://docs.mulesoft.com/runtime-fabric/2.11/configure-local-registry source_site: docs.mulesoft.com content_type: documentation content_hash: 9435039b72aa59de01c2d01887454126c359bd26078ca7fa211c7d9b8be23fb7 description: MuleSoft Documentation Site release: "2.11" latest: false --- --- product: Runtime Fabric version: 2.11 --- # Using a Local Registry with Runtime Fabric > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Runtime Fabric uses its own registry to store the necessary Docker images for installing and managing Runtime Fabric and for running applications in Kubernetes. If your security policies require that you pull your Docker images from a registry under your control, you can set up a local registry to pull and store these Docker images. ## Limitations on Local Registry Support You can configure local registry across all Runtime Fabric supported platform vendors to store Mule Docker images (for use when managing application deployments) and Runtime Fabric software images (for use when updating or installing Runtime Fabric software). The following details and limitations apply to both Mule Docker images and Runtime Fabric software images. > [!IMPORTANT] You cannot use local registry for installation or management of Runtime Fabric > operator on OpenShift. - You can use [Runtime Fabric command line utility (`rtfctl`)](https://docs.mulesoft.com/runtime-fabric/2.11/install-rtfctl) version 0.3.150 or later. `rtfctl` installs Runtime Fabric agent to the latest version by default. - You can use Helm to install Runtime Fabric and configure your local registry. - You can use a local registry only if you create a new Runtime Fabric instance of version 1.12.0 or later. If you set up a local registry, you can upgrade to a version later than 1.12.0 without reinstalling Runtime Fabric. To add local registry to an existing Runtime Fabric instance, ensure that the installation is Helm-based [Migrating to Helm Managed Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/2.11/migrate-helm) and perform the steps on this section to add local registry. - If you create a Runtime Fabric instance to use with a local registry, you cannot later reconfigure it to use the `rtf-runtime-registry` endpoint. To use the `rtf-runtime-registry` endpoint, you must install a new Runtime Fabric instance using the standard installation procedure. - You are responsible for synchronizing your local registry with required dependencies: - [Synchronize Runtime Fabric core software images or dependencies automatically](#synch-rtf) - [Synchronize Mule runtime images or dependencies manually](#synch-runtime) - Synchronize third party dependencies required by your application. MuleSoft doesn’t provide additional software to synchronize third party dependencies and images. Push all the dependency images for your Mule app to your local registry before you start the deployments. - If you use a local registry that needs authentication, synchronization and propagation of a pull secret between different namespaces is your responsibility. Alternatively, Runtime Fabric can synchronize your pull secret across different namespaces if your secret uses this label: labels: rtf.mulesoft.com/synchronized: "true" - If you need to authenticate access to your local registry, ensure that the [corresponding credentials are configured as a Kubernetes secret in the `rtf` namespace](https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/#registry-secret-existing-credentials). You’ll need the name of the configured secret when you install Runtime Fabric. ## Synchronize Mule Runtime Dependencies and Images to Your Local Registry To synchronize in your registry the Mule runtime versions you intend to use for application deployments, refer to the [Mule runtime patch updates for Runtime Fabric Release Notes](https://docs.mulesoft.com/release-notes/runtime-fabric/runtime-fabric-runtimes-release-notes). The location of the image follows this format: `rtf-runtime-registry.kprod.msap.io/mulesoft/`. ## Synchronize Runtime Fabric Core Software Dependencies and Images to Your Local Registry To install Runtime Fabric, you must first synchronize the dependencies images to your local registry. You can perform the synchronization by either running a script automatically or executing commands manually. - Synchronize Automatically - Synchronize Manually To synchronize the dependencies images automatically, run a bash script that uses the `docker`, `curl`, and `jq` tools. > [!NOTE] Automated registry synchronization is available from Runtime Fabric version 2.6.0 onwards. > Previous dependencies cannot be retrieved using this script. Ensure that your [Access Management permission for Runtime Manager](https://docs.mulesoft.com/access-management/permissions-by-product#runtime-manager) is set to **Read Runtime Fabric**, which enables you to query Runtime Fabrics in your organization. 1. In your Unix shell, run this script, replacing `agent-version`, `authorization-token`, `mulesoft-docker-server`, and any other parameter value where appropriate: For non-OpenShift environments: ```copy ##!/usr/bin/env bash dependencies=$(curl /runtimefabric/api/agentmanifests/ -H 'Authorization: bearer ' | jq -c '.dependencies |.[] | select(.provider | contains("generic")) | "\(.artifact):\(.version)"' | sed 's/"//g') for i in $dependencies do echo "Processing $i" docker pull /mulesoft/$i docker tag /mulesoft/$i /mulesoft/$i docker push /mulesoft/$i done ``` For OpenShift environments: ```copy ##!/usr/bin/env bash dependencies=$(curl /runtimefabric/api/agentmanifests/ -H 'Authorization: bearer ' | jq -c '.dependencies |.[] | select(.provider | contains("openshift")) | "\(.artifact):\(.version)"' | sed 's/"//g') for i in $dependencies do echo "Processing $i" docker pull /mulesoft/$i docker tag /mulesoft/$i /mulesoft/$i docker push /mulesoft/$i done ```
Table 1. Script Parameters
ParametersDescription

platform-url

Anypoint Platform URL, such as https://anypoint.mulesoft.com, or https://eu1.anypoint.mulesoft.com.

agent-version

Runtime Fabric agent release version required for the synchronization.

authorization-token

Authorization token required for using connected apps to perform the synchronization. When you use this token, a link redirects to the connected apps page.

mulesoft-docker-server

MuleSoft Docker server required for the synchronization.
For the US control plane: rtf-runtime-registry.kprod.msap.io
For the EU control plane: rtf-runtime-registry.kprod-eu.msap.io

To synchronize the dependencies images manually, follow these steps: 1. Log in to your private container registry and run this command, replacing `docker-server` where appropriate: For the US control plane: ```copy # docker pull rtf-runtime-registry.kprod.msap.io/mulesoft/rtf-agent:v1.12.0 # docker tag rtf-runtime-registry.kprod.msap.io/mulesoft/rtf-agent:v1.12.0 /mulesoft/rtf-agent:v1.12.0 # docker push /mulesoft/rtf-agent:v1.12.0 ``` For the EU control plane: ```copy # docker pull rtf-runtime-registry.kprod-eu.msap.io/mulesoft/rtf-agent:v1.12.0 # docker tag rtf-runtime-registry.kprod-eu.msap.io/mulesoft/rtf-agent:v1.12.0 /mulesoft/rtf-agent:v1.12.0 # docker push :5000/mulesoft/rtf-agent:v1.12.0 ``` ## Configure Your Local Registry for Runtime Fabric To configure a local registry, you must gather and add the necessary credentials to synchronize the registries. ### Before You Begin Ensure that you’ve performed these tasks: 1. Set up, configure, and test your private Docker image registry. 2. [Synchronize](#synch-rtf) to your local registry all of the Docker images that you need to install Runtime Fabric: See the [Runtime Fabric release notes](https://docs.mulesoft.com/release-notes/runtime-fabric/runtime-fabric-release-notes-2.x.x) for the required dependencies for your Runtime Fabric version. > [!NOTE] Dependency versions are specific to the Runtime Fabric version. To install Runtime Fabric with your local registry using `rtfctl` or `helm`, select one of these options: - RTFCTL - Helm - OpenShift 1. [Download and install the `rtfctl` command line utility](https://docs.mulesoft.com/runtime-fabric/2.11/install-self-managed#step-3-download-the-rtfctl-utility) version 0.3.150 or higher. 2. Obtain `rtf-runtime-registry` credentials: ```copy # rtfctl get registry-credentials ``` This command sets `RTF_IMAGE_REGISTRY_ENDPOINT`, `RTF_IMAGE_REGISTRY_USER`, and `RTF_IMAGE_REGISTRY_PASSWORD` in the current shell environment. 3. Run these commands to verify that the Docker login to the `rtf-runtime-registry` succeeds: ```copy # eval $(rtfctl get registry-credentials ) # docker login $RTF_IMAGE_REGISTRY_ENDPOINT --username $RTF_IMAGE_REGISTRY_USER --password $RTF_IMAGE_REGISTRY_PASSWORD ``` You should see a message that the login was successful. 4. [Synchronize your container images](#synch-rtf) to your local registry. 5. Repeat step 3 for all the other dependency images (resourceFetcher, clusterOps etc.) based on the versions published in the Runtime Fabric release notes. 6. If you use authentication to access your registry, create the required secret in the rtf namespace: ```copy # kubectl create namespace rtf # kubectl create secret docker-registry regcred --namespace=rtf --docker-server= --docker-username= --docker-email= --docker-password= # kubectl label secret regcred rtf.mulesoft.com/synchronized=true -n rtf ``` 7. Finalize the Runtime Fabric installation, and configure it to pull from your local registry: ```copy # rtfctl install ‘’ --image-pull-registry ``` Alternatively, if you use authentication to access your registry, use this command: ```copy # rtfctl install ‘’ --image-pull-registry --image-pull-secret ``` This command ensures that Runtime Fabric creates the necessary overrides for the local registry URL and `image-pull-secret` values so Runtime Fabric continues to pull images from the local registry even after an upgrade. 8. If you use authentication to access your registry, after you complete the installation, you must recreate the pull secret in the RTF namespace and in any other namespaces where you will deploy applications. 9. Refer to the [installation instructions](https://docs.mulesoft.com/runtime-fabric/2.11/install-self-managed) for further steps, such as inserting the Mule license key. The `rtfctl uninstall` command deletes any pull secret you specify during installation. When using `rtfctl` to perform a backup and restore procedure, the backups point to your local registry URL and pull secret. 1. [Synchronize your container images](#synch-rtf) to your local registry. 2. [Create a Runtime Fabric using Runtime Manager](https://docs.mulesoft.com/runtime-fabric/2.11/install-helm#create-a-runtime-fabric-using-runtime-manager). 3. In Runtime Manager, select the **Helm** path, and follow the instructions on the screen platform. 4. Obtain your private `docker-server`, `docker-username`, and `docker-password`. 5. Follow the **Helm** path instructions in Runtime Manager to create a secret with your docker server name, username, and password by running this command in your Unix shell: ```copy kubectl create secret docker-registry rtf-pull-secret --namespace --docker-server= --docker-username= --docker-email= ``` 6. Follow the **Helm** path instructions to download the `values.yml` file so that you can modify its values. For the private registry configuration, update `rtfRegistry` with your local docker server, and update the `pullSecretName` parameter. . 7. Continue with the **Helm** path instructions and install Runtime Fabric in your Kubernetes cluster. 8. [Synchronize your container images](#synch-rtf) to your local registry. 9. [Create a Runtime Fabric using Runtime Manager](https://docs.mulesoft.com/runtime-fabric/2.11/install-helm#create-a-runtime-fabric-using-runtime-manager). 10. In Runtime Manager, follow the instructions on the screen platform. 11. Obtain your private `docker-server`, `docker-username`, and `docker-password`. 12. Follow the instructions in Runtime Manager to create a secret with your docker server name, username, and password by running this command in your Unix shell: ```copy oc create secret docker-registry rtf-pull-secret --namespace --docker-server= --docker-username= --docker-email= ``` 13. In the OpenShift form view, set the rtfRegistry values to configure the local registry. ![OpenShift form view to add values for rtfRegistry](/mulesoft/current/en-us/runtime-fabric/2.11/_images/ocp-local-registry.png) 14. Continue with the OpenShift installation. ## See Also - [Configure values.yml Reference](https://docs.mulesoft.com/runtime-fabric/2.11/install-helm#values-yml-reference)