Product

Aanjaleya Container Registry

The on-fabric OCI control plane for every pull on Aanjaleya Cloud. Prime sits on a durable site VIP so guest CRI never depends on the public internet after day-0; dedicated registries give teams isolation without a second product. Create in the console or declare the same intent in GitOps, accelerate metadata with Valkey, and read CVE posture from a single security overview.

Built on a custom Zot fork — mirrors and pull-through, scheduled Trivy scans, air-gap OCI ingest — operated next to clusters and IAM, not as a forgotten sidecar.

Tenancy

How registries relate to every tenant

Create Tenant picks a primary registry. That choice is injected into Talos machine config as CRI mirrors — Prime for the site default, dedicated when a cluster must stay isolated.

Prime VIP

Site Zot — default CRI target

Tenant clusters

Pick primaryRegistryId at create

Dedicated Zot

Isolation for a team or pack

CRI mirrors

skipFallback → registry endpoint

1
Prime VIP
Site registry at a durable VIP — day-0 hydrate, default for most tenants.
2
Create Tenant → Registry
Pick primaryRegistryId: Prime or a dedicated Ready registry.
3
CRI mirrors injected
Talos machine config gets registries.mirrors with skipFallback → that endpoint.
4
Consumers listed
Registry rows show which clusters and services are pinned to them.

Injected into every tenant machine config

CapA/Talos render registries.mirrors for ghcr.io, docker.io, registry.k8s.io, quay.io, and * with skipFallback: true pointing at the chosen registry endpoint. Consumers on the registry list are those pinned clusters and services.

Talos · registries.mirrors

machine:
  registries:
    mirrors:
      ghcr.io:
        skipFallback: true
        endpoints:
          - http://192.168.130.222:5000
      docker.io:
        skipFallback: true
        endpoints:
          - http://192.168.130.222:5000
      registry.k8s.io:
        skipFallback: true
        endpoints:
          - http://192.168.130.222:5000
      quay.io:
        skipFallback: true
        endpoints:
          - http://192.168.130.222:5000
      "*":
        skipFallback: true
        endpoints:
          - http://192.168.130.222:5000

Powered by Zot

Custom fork. Open-source core.

Aanjaleya Container Registry is built on Zot, the CNCF OCI registry — extended as an Aanjaleya fork for fabric day-0, VIP CRI, Cloud IAM, mirror/pull-through policy, Trivy-backed scan schedules, and air-gap OCI archive ingest.

Open source

Zot

Open-source OCI registry that Aanjaleya Container Registry builds on. Zot is a trademark of its respective owners; Aanjaleya is not affiliated with or endorsed by the CNCF in this attribution.

github.com/project-zot/zot

Aanjaleya Innovation Private Limited is not affiliated with or endorsed by those projects in this attribution.

Talk to us Air-gap detail All features