A node that pulls an image authenticates as nobody unless the task carries
credentials, and the registry counts anonymous pulls per address, so the whole
estate shares one budget. Deployments and image updates now pass
--with-registry-auth, and --rotate-key writes the current credentials into every
service of a stack after the account token has been rotated, without touching
the images.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Marc WäckerlinandClaude Opus 5
Marc Wäckerlin
Marc Wäckerlin