glab-artifact-registry-get-token(1)

Usage

glab artifact-registry get-token [flags]

Overview

Exchange a GitLab credential for a short-lived access token scoped to the GitLab Artifact Registry. The command prints the bare token to stdout, so a shell can capture it directly, for example to feed docker login.

Prerequisites:

•: A GitLab Enterprise Edition (EE) instance on GitLab 19.1 or later.

•: Token exchange enabled on the instance (the gate_token_exchange_endpoint feature flag).

This feature is an experiment and is not ready for production use. It might be unstable or removed at any time. For more information, see https://docs.gitlab.com/policy/development_stages_support/.

Options

--duration=15m0s
How long the token should remain valid. Must be between 1s and 12h0m0s.

--hostname=""
GitLab hostname to request the token from. Defaults to the configured GitLab instance.

--jq=""
Filter JSON output with a jq expression.

-F, --output="text"
Format output as: text, json.

Options inherited from parent commands

-h, --help[=false]
Show help for this command.

Examples

# Get a token using the default duration
glab artifact-registry get-token
# Get a token valid for one hour
glab artifact-registry get-token --duration 1h
# Get a token as JSON, including its expiry
glab artifact-registry get-token --output json

Referred to by