Location of images

Images for IBM Cloud Pak® for Integration are stored in online container registries:

  • IBM Cloud Container Registry

  • IBM Entitled Registry

  • Red Hat Quay.io

To use these registries, you must ensure they are accessible from your cluster nodes.

IBM Cloud Container Registry and IBM Entitled Registry

IBM Cloud® Container Registry hosts IBM® software container images.

The IBM Entitled Registry is a namespace of the IBM Cloud Container Registry, where image permissions are linked to the software entitlement associated with IBM IDs. The IBM Entitled Registry contains images that require license entitlement to pull and run. Pulling images from the IBM Entitled Registry requires an entitlement key.

For information on obtaining your entitlement key and applying it to your cluster as a pull secret, see Finding and applying your entitlement key by using the UI (online installation).

The cpopen namespace hosts operator images that can be pulled without authentication. This enables you to configure clusters for use with IBM Cloud Pak for Integration without having to supply an entitlement key. An entitlement key is required only when deploying instances.

The appc-dev namespace hosts images for IBM App Connect Enterprise for Developers. These images can be pulled without authentication.

The following images are available:

  • IBM Cloud Pak for Integration operators

  • Operator catalogs

  • All images that require entitlement to pull and run. This includes images used when deploying instances using the operators.

For the IBM Cloud Container Registry, CASE OCI artifact, and Cloud Pak foundational services catalog source, network flows must be open for TCP/IP traffic to the following hosts on the https (443) port:

  • icr.io

  • cp.icr.io

  • dd0.icr.io

  • dd2.icr.io

  • dd4.icr.io

  • dd6.icr.io

If the environment is in China, you must also allow the following hosts:

  • dd1-icr.ibm-zh.com

  • dd3-icr.ibm-zh.com

  • dd5-icr.ibm-zh.com

  • dd7-icr.ibm-zh.com

Red Hat Quay.io

Quay.io is a public container registry that hosts publicly accessible images, as well as private repositories. For more information see the Red Hat Quay.io documentation.

The following IBM images are available in Quay.io, in the quay.io/opencloudio namespace:

  • Images for IBM Cloud Pak foundational services

  • Images for CouchDB

For the Cloud Pak foundational services and CouchDB catalog and images, network flows must be open for TCP/IP traffic to the following hosts on the https (443) port:

  • quay.io

  • cdn.quay.io

  • cdn01.quay.io

  • cdn02.quay.io

  • cdn03.quay.io

For more information, see Important firewall changes for customers pulling container images.