Manage an access token

Change a token’s expiry or permissions, give it a new value, turn it off for a while, or delete it.

Before you begin

You need an access token in a registry project and, if you are a team member, a role with the update and delete permissions for Container Registry. See Create an access token.

Find the token

In MyAccount, under Storage, click Container Registry, and click your project. Open its Access token tab. Every action is in the token’s Actions menu.

When each action is available

• Edit and Reset are available for an enabled token that has not expired.
• Enable and Disable are available for a token that has not expired.
• Delete is always available.

Each action asks you to confirm in a Confirm Token dialog. Check the box that begins I acknowledge the above content and wish to proceed with, then click the action’s button.

Change the expiry, permissions, or description

1. In the token’s Actions menu, click Edit. Edit Token opens.
2. Change the expiry under Expiration, check or clear Push under Permissions:, or change the Description. The name stays as it is.
3. Click Update, and confirm.

Reset the token value

Reset a token when you have lost its value, or when someone else has seen it. The token gets a new value, and the old value stops working.

1. In the token’s Actions menu, click Reset, and confirm.
2. The Access Token dialog shows the Token Name and the new Token Value. Copy the value now: it will not be accessible again.

Log in again everywhere the token is used, with the new value. For a Kubernetes cluster, delete the secret with kubectl delete secret <secret-name> --namespace <namespace>, then create it again with the new value; see Pull images from a Kubernetes pod.

Disable or enable a token

To turn a token off for a while without deleting it, click Disable in its Actions menu, and confirm. To make it work again with the same value, click Enable, and confirm. To reset a disabled token, enable it first.

Delete a token

Deleting a token is permanent, and anything that uses it loses access at once. Deleting one also makes room for a new token when the project has five.

1. In the token’s Actions menu, click Delete.
2. In Confirm Delete Token, check the box that begins I acknowledge the above content and wish to proceed with, and click Delete.

The token leaves the list. For an expired token, delete it and create a new one; see Create an access token. Your tokens now match the systems that use them. To give a new system access, see Create an access token. If an action is not available or is refused, see Troubleshooting Container Registry.