Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 15 additions & 3 deletions content/manuals/dhi/how-to/mirror.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,9 +34,21 @@ repositories:

## Mirror a DHI repository to your organization

To mirror repositories, you must be an organization owner or editor, or use a
personal access token (PAT) or organization access token (OAT). See the CLI and
Terraform tabs in the following sections for required permission scopes.
Organization owners, editors, and members with a [custom role](../../enterprise/security/roles-and-permissions/custom-roles.md)
that includes the DHI mirroring permission can create, view, and manage mirrors.
When using the CLI or Terraform, you can also mirror using an [organization
access token (OAT)](../../enterprise/security/access-tokens.md) with the
appropriate permission scopes, without requiring role-based access.

Docker automatically creates and manages the `dhi-mirroring-admins` team when
a mirror is initiated, assigning it to each new mirror. Members with the DHI
mirroring permission are automatically added to this team so they can view and
manage mirrors after creation. Removing members from this team may affect their
ability to view and manage mirrors.

You can mirror image and chart repositories to your organization's namespace on
Docker Hub. Mirroring makes the repositories available within your organization
and lets you customize them for your environment:

- Image repositories: Mirroring lets you customize images by adding packages,
OCI artifacts (such as custom certificates or additional tools), environment
Expand Down