JFrog Artifactory

Configure JFrog Artifactory as a pull-through cache for cr.root.io. This lets teams pull Root-secured images through their existing Artifactory instance - applying organizational access controls, enabling local caching, and maintaining a single source of truth for container images.

Prerequisites

JFrog Artifactory Pro, Enterprise, or Cloud instance with admin access
A Root Container Registry account and access token
Docker client configured to authenticate with your Artifactory instance

Step 1: Create a Remote Docker Repository

Log into your JFrog Platform UI
Navigate to Administration → Repositories → Repositories
Click + Add Repositories → Remote Repository
Select Docker as the package type

Step 2: Configure Repository Settings

In the Basic tab:

Field	Value
Repository Key	`root-containers`
URL	`https://cr.root.io`

Under Credentials:

Field	Value
Username	`root`
Password	Your Root access token

Step 3: Configure Advanced Settings (Recommended)

In the Advanced tab:

Setting	Recommended Value	Description
Store Artifacts Locally	Enabled	Caches pulled images in Artifactory
Retrieval Cache Period	`7200` seconds	How long to cache metadata before rechecking upstream
Missed Retrieval Cache Period	`1800` seconds	How long to cache “not found” responses
Block Mismatching MIME Types	Enabled	Security best practice

Click Create Remote Repository to save.

Step 4: Test the Configuration

Navigate to Application → Artifactory → Artifacts, select your root-containers repository, and browse available images to confirm connectivity.

Pulling Images Through Artifactory

# Authenticate with Artifactory
docker login your-instance.jfrog.io

# Pull a Root image through Artifactory
docker pull your-instance.jfrog.io/root-containers/python:3.12

Compare to pulling directly from Root:

# Direct from Root
docker pull cr.root.io/python:3.12

# Through Artifactory
docker pull your-instance.jfrog.io/root-containers/python:3.12

The image contents are identical. Artifactory caches the layers after the first pull.

Optional: Virtual Repository

To aggregate Root images with other container registries behind a single URL:

Navigate to Administration → Repositories → Repositories
Click + Add Repositories → Virtual Repository
Select Docker as the package type
Configure:

Field	Value
Repository Key	`docker-virtual`
Repositories	Select `root-containers` and any other Docker repositories
Default Deployment Repository	Your local Docker repository

Teams then pull from a single virtual registry:

docker pull your-instance.jfrog.io/docker-virtual/python:3.12

Kubernetes Integration

Update image references in your manifests:

# Before (direct from Root)
spec:
  containers:
    - name: app
      image: cr.root.io/python:3.12

# After (through Artifactory)
spec:
  containers:
    - name: app
      image: your-instance.jfrog.io/root-containers/python:3.12

Create an ImagePullSecret for your Artifactory instance:

kubectl create secret docker-registry artifactory-pull-secret \
  --docker-server=your-instance.jfrog.io \
  --docker-username=your-artifactory-username \
  --docker-password=your-artifactory-token \
  --namespace=your-namespace

Reference it in your deployments:

spec:
  imagePullSecrets:
    - name: artifactory-pull-secret

Troubleshooting

Issue	Solution
`401 Unauthorized`	Verify Root access token is valid and correctly entered in Artifactory credentials
Images not found	Check that the image path matches exactly; verify remote repository URL is `https://cr.root.io`
Slow initial pulls	First pull fetches from Root and caches in Artifactory; subsequent pulls are served locally
Stale images	Reduce Retrieval Cache Period if you need Root Patches to propagate faster

For Root credential issues: support@root.io For Artifactory configuration issues: refer to JFrog documentation

Getting Started

Root Image Catalog

Platform

Integrations

AI Integrations

Root Library Catalog

Core Concepts

Reports & Insights

Reference

Trust & Compliance

JFrog Artifactory

Prerequisites

Step 1: Create a Remote Docker Repository

Step 2: Configure Repository Settings

Step 3: Configure Advanced Settings (Recommended)

Step 4: Test the Configuration

Pulling Images Through Artifactory

Optional: Virtual Repository

Kubernetes Integration

Troubleshooting

​Prerequisites

​Step 1: Create a Remote Docker Repository

​Step 2: Configure Repository Settings

​Step 3: Configure Advanced Settings (Recommended)

​Step 4: Test the Configuration

​Pulling Images Through Artifactory

​Optional: Virtual Repository

​Kubernetes Integration

​Troubleshooting

Prerequisites

Step 1: Create a Remote Docker Repository

Step 2: Configure Repository Settings

Step 3: Configure Advanced Settings (Recommended)

Step 4: Test the Configuration

Pulling Images Through Artifactory

Optional: Virtual Repository

Kubernetes Integration

Troubleshooting