docs: private image credentials (docker-registry secrets) - #767
Draft
warp-factories[bot] wants to merge 1 commit into
Draft
warp-factories[bot] wants to merge 1 commit into
warp-factories[bot] wants to merge 1 commit into
Conversation
Add create flow for oz secret create docker-registry and the web UI Private image credential type, plus runner/factory-as-code cross-links.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Contributor
Author
|
This PR was generated with Warp. Comment |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this feature does
oz secret create docker-registry(and the web Private image credential type) stores a registry host, username, and password so Warp-hosted Linux runners and environments can pull private sandbox images. The credential authenticates the pull only — it is never injected as an environment variable. Shipped inv0.2026.09.16.08.27.stable_02(2026-09-16).Summary
Drift-watch for stable
v0.2026.09.16.08.27.stable_02. #15913 was deferred on 2026-09-11 (not yet in stable); Gate 0 now clears. Updates existing secrets, runners, and factory-as-code pages.Content design plan
factory-as-codealready nameslinux.registryCredentialSecretName/docker_registry, but secrets and runners pages never said how to create the credential or that it is not env-injected.platform/secrets.mdx, a private-image paragraph onplatform/runners.mdx, and a create link fromfactories/factory-as-code.mdx. Excludes attaching viaoz runner create(no CLI flag yet) and ECR-specific auth types not in this release's CLI surface.Changes
src/content/docs/platform/secrets.mdxoz secret create docker-registryflags (--host,--username,--password-file,--password)src/content/docs/platform/runners.mdxsrc/content/docs/factories/factory-as-code.mdxregistryCredentialSecretNameto the new secrets sectionUnverified claims
registryCredentialSecretNamewere not verified against a live build (GraphQL field and factory-as-code key confirmed in code).app/src/ai/agent_sdk/secret.rs; web list label not re-checked live.Deferred findings (this release)
See companion bookkeeping PR. API routes mapped internal; other changelog items failed gates or were already covered.
Reviewer routing
suggest_reviewers.pyresolved multiple humans (bnavetta,ianhodge,Legoben,captainsafia,liliwilson) — no single owner. Requestingdannyneiraper drift-watch fallback so the PR is not left without a requested reviewer.Documentation risk
Risk: engineering-review-required
Rationale: New CLI and UI docs for private image credentials; engineering should confirm host matching, non-injection, and attach surfaces.
Docs override: none