Overview
GitLab Container Registry is a secure container image registry integrated with GitLab repositories and CI/CD pipelines. It’s included with both GitLab.com and self-hosted GitLab instances.Registry URL
GitLab.com:Image Format
registry.gitlab.com/mycompany/api:latestregistry.gitlab.com/team/project/frontend:v1.2.3
Authentication
GitLab Container Registry uses GitLab Personal Access Tokens or Deploy Tokens for authentication.Personal Access Token (Recommended)
Required Scopes:read_registry- Pull imageswrite_registry- Push images (if needed)
Deploy Token
Deploy tokens can be created at project or group level for read-only or read-write access.Configuration in Qovery
1
Create Personal Access Token
- Go to GitLab → User Settings → Access Tokens
- Enter token name (e.g., “Qovery Registry Access”)
- Select expiration date
- Select required scopes:
read_registrywrite_registry(if pushing images)
- Click Create personal access token
- Copy the token immediately
2
Access Organization Settings
Navigate to Organization Settings → Container Registries in Qovery
3
Add Registry
Click Add Registry
4
Select GitLab Container Registry
Choose GitLab Container Registry from the registry type dropdown
5
Enter Registry URL
- For GitLab.com:
https://registry.gitlab.com - For self-hosted:
https://your-gitlab-instance:5050
6
Enter Credentials
Provide:
- Username: Your GitLab username
- Password: Personal Access Token or Deploy Token
7
Save
Qovery will verify the credentials and save the configuration
Using Deploy Tokens
Deploy tokens are ideal for production deployments:1
Create Deploy Token
- Navigate to your GitLab project or group
- Go to Settings → Repository → Deploy Tokens
- Enter token name and expiration (optional)
- Select scopes:
read_registry
- Click Create deploy token
- Copy username and token
2
Use in Qovery
Enter the deploy token username and token as credentials
Self-Hosted GitLab
For self-hosted GitLab instances:- Ensure the registry is enabled in GitLab configuration
- Use the correct registry URL (typically
https://<gitlab-host>:5050) - Verify SSL/TLS certificates are properly configured
- Ensure Qovery can reach your GitLab instance