Integrations

Integrating with RapidFort Curated Images

RapidFort Curated Images, are container base and application images maintained by RapidFort.

Proxy and cache these images in Cloudsmith by configuring a RapidFort Curated Images upstream.

Upstream configuration

Form Field	Description
Name	A descriptive name for this upstream source. A shortened version of this name will be used for tagging cached packages retrieved from this upstream.
Priority	The weighting of the upstream source. Upstream sources are selected for resolving requests by sequential order (1..n), followed by creation date.
Proxy URL	The URL for this upstream source. This must be a fully qualified URL including any path elements required to reach the root of the repository.
Proxy Only	Proxy requests through to upstream sources in order to match assets that are not present in this repository.
Cache and Proxy	Proxy the initial request for an asset through to the upstream source and then store (cache) resolved assets in this repository for future requests.
Authentication	Select the authentication method required by this upstream. If the upstream does not require credentials, select None from the dropdown.
Headers (optional, under Additional options)	Optional key-value headers that can be passed to upstreams with each request.
Verify SSL Certificates (under Additional options)	If enabled, SSL certificates are verified when requests are made to this upstream. We recommend leaving this enabled for all public sources to help mitigate Man-In-The-Middle (MITM) attacks.

Adding RapidFort Curated Images as an upstream

You can integrate the RapidFort Curated Images registry into your Cloudsmith account by adding a RapidFort upstream.

RapidFort service account credentials
Authentication is required to access RapidFort Curated Images. Log in to RapidFort and navigate to Settings > Service accounts to create a service account and retrieve an RF_ACCESS_ID and RF_SECRET_ACCESS_KEY.

In your Cloudsmith repository, go to the Sources tab.
If you have existing upstreams configured, click + Configure new upstream.
In the modal, select the Hardened images tab.
Click the RapidFort Curated Images card.
Select the Curated tier.
In the Name field, enter a descriptive name for the upstream.
In the Priority field, specify a priority for the upstream.

For more information about upstream priority, see Upstream concepts: Priority.
The Proxy URL field is pre-filled with the RapidFort Curated Images URL: https://quay.io/.
Under Package delivery, select Cache and proxy.
Under Authentication, select Basic Auth, then enter your RF_ACCESS_ID as the username and RF_SECRET_ACCESS_KEY as the password.
Click Additional options.
(Optional) In the Headers section, add key-value headers to pass to the upstream with each request.
Click + Add upstream.

Your RapidFort Curated Images upstream appears on the Upstream registries section of the Sources tab.

Pull a RapidFort Curated Image with Docker native tooling

To pull a RapidFort Curated Image into Cloudsmith after you've configured your Cloudsmith upstream for RapidFort Curated Images:

Configure a Cloudsmith upstream for RapidFort Curated Images by using the instructions in Adding RapidFort Curated Images as an upstream.
Ensure that Docker is installed on your system. For more information about installing Docker, see the Docker: Install Docker Engine documentation.
Open a terminal.
Log in to Docker using your Cloudsmith username and token:
bash
```
docker login docker.cloudsmith.io
```
Pull the image by running the following command, replacing WORKSPACE and REPOSITORY with your Cloudsmith workspace and repository, and adjusting the image name and tag to match a package available in the RapidFort Curated Images registry:
bash
```
docker pull docker.cloudsmith.io/WORKSPACE/REPOSITORY/rfcurated/IMAGE_NAME:IMAGE_TAG
```
Check your Cloudsmith repository to find the newly added image.

Updated 6 hours ago