Plant a Vine
Container Registry
ECR, Artifact Registry, and ACR configuration — tag mutability and image scanning.
Container Registry
The container registry section creates managed Docker image registries for your application containers. Multiple registries can be added per vine.
Fields Per Registry
| Field | Type | Description |
|---|---|---|
| Name | Text input | Repository name (e.g., api, frontend, worker) |
| Tag Mutability | Select | MUTABLE (tags can be overwritten) or IMMUTABLE (once pushed, a tag is permanent) |
| Scan on Push | Toggle | Automatically scan images for vulnerabilities on push |
Services by Provider
ECR (Elastic Container Registry)
- Private repositories with IAM-based access
- Lifecycle policies (auto-expire old images)
- Integration with EKS for pull authentication
Artifact Registry
- Docker and OCI image support
- IAM-based access control
- Vulnerability scanning via Container Analysis
ACR (Azure Container Registry)
- SKU tiers: Basic, Standard, Premium
- Geo-replication (Premium)
- Integration with AKS for pull authentication
Tag Mutability
| Mode | Behavior | Use Case |
|---|---|---|
| MUTABLE | Same tag (e.g., latest) can be pushed multiple times | Development, CI/CD with latest tag |
| IMMUTABLE | Once a tag is pushed, it cannot be overwritten | Production (ensures deployed image is never changed) |
Immutable tags prevent accidental overwrites in production. A v1.2.3 tag always points to the same image digest, making rollbacks deterministic.
After Provisioning
The registry card in vine detail shows:
- Repository URL — full push/pull endpoint (e.g.,
123456789012.dkr.ecr.eu-west-1.amazonaws.com/api) - Status — ACTIVE or CREATING