wrangler containers registries credentials generates temporary registry credentials

Introduced 2026-03-03 · score 0.97

HOW TO USE IT

When a CI or local Docker workflow needs Cloudflare managed registry access, run the credentials command with `--push`, `--pull`, or both; credentials default to 15 minutes, configurable with `--expiration-minutes`.

WHY THIS HELPS

Authenticate Docker in a CI/CD pipeline or local development workflow to push or pull container images from Cloudflare's managed registry.

REQUIREMENTS AND LIMITATIONS

• Version: 4.70.0
• registry.cloudflare.com (required): Registry host targeted by the release-note invocations.
• --push: Generate credentials with push permission.
• --pull: Generate credentials with pull permission.
• --expiration-minutes: Credential validity in minutes; documented default is 15.
• Credentials are short-lived.
• The default expiration is 15 minutes.
• Docs conflict: Current Wrangler command docs (updated Apr 23, 2026, after v4.70.0) show `wrangler containers registries credentials [OPTIONS]` without a registry positional argument, while the v4.70.0 release note examples include `registry.cloudflare.com`. The current docs do not clarify whether the positional argument was removed or is optional.

FIRST-PARTY EVIDENCE

• https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.70.0
• https://developers.cloudflare.com/workers/wrangler/commands/containers/

Check the installed version and the source before using it. Entry JSON

Report a problem with this card