Trow-Registry/trow

Health v2 · maintenance only

Adoption not part of the score

1028 stars · 109 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Trow is a lightweight OCI-compliant container image registry written in Rust that runs inside a Kubernetes cluster. It caches external images locally and enforces approve/deny lists via an admission webhook to control which images can run in the cluster.

Use cases

• run a self-hosted container registry inside my kubernetes cluster
• cache docker images locally to speed up pulls and avoid rate limits
• restrict which container images are allowed to run in the cluster
• proxy and cache images from external registries like docker hub
• set up a lightweight private registry with a helm chart
• prevent unauthorized images from being deployed to kubernetes

When to choose

• you run Kubernetes and want a small in-cluster registry with pull-through caching
• you need to lock down cluster images with allow/deny admission control
• you want a simple, low-resource OCI registry without running a heavyweight solution like Harbor

When to avoid

• you need high availability or distributed registry architecture (still on the roadmap)
• you require full auditing and authentication of image access (planned, not implemented)
• you need a general-purpose registry outside Kubernetes with mature enterprise features

Facets

service · maturity active

container-runtime http-server security caching self-hosted cloud-computing self-hosted infrastructure-as-code rust cloud self-hosted container-registry oci-distribution image-cache kubernetes admission-webhook helm-chart pull-through-cache containers devops docker linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Trow-Registry/trow")