Image management and caching for Kubernetes.
We're building a small registry to make image management in Kubernetes easy. The Trow Registry runs inside the cluster with very little resources, and is simple to set-up so it caches every image.
- Spin up a lightweight registry within Kubernetes
- Cache every image in a cluster, thanks to the mutating webhook
- Prevent unauthorized images form touching the cluster with the admission webhook
Features include:
- conforms to the OCI Distribution Specification for registries
- controls images running inside the cluster via approve/deny lists
- automagically proxy any registry
- distributed architecture for HA and scalability (coming soon)
- full auditing and authentication of image access (planned)
See COMPARISON.md.
Note that Trow is currently beta and you can expect to find rough edges.
If you're interested in the design of Trow please take a look at the Architecture Guide.
Work has started on a User Guide. Currently this explains how to persist images and how to list repositories and tags via curl.
Please take a look at CONTRIBUTING.md for details on how to help out and DEVELOPING.md for how to get started compiling and running Trow. See also the Architecture Guide.
All participants in the Trow project are expected to comply with the code of conduct.
"Trow" is a word with multiple, divergent meanings. In Shetland folklore a trow is a small, mischievous creature, similar to the Scandinavian troll. In England, it is an old style of cargo boat that transported goods on rivers. Finally, it is an archaic word meaning "to think, believe, or trust". The reader is free to choose which interpretation they like most, but it should be pronounced to rhyme with "brow".