Skip to main content

Manage robot accounts

A Robot Account is a service account used for automated authentication in CI/CD pipelines or integrated systems. Instead of using a user account, a Robot Account provides independent credentials with strictly controlled permissions.

Prerequisites​

  • Your Container Registry service is activated.
  • You have permission to manage Robot Accounts in the Project.
  • You created a Robot Account. See Create a robot account.

View the robot account list​

FPT Cloud displays all Robot Accounts created on the Portal, helping you monitor the status and manage the access permissions of each account.

Robot account list on the Portal

Update a robot account​

FPT Cloud allows you to edit the information of an existing Robot Account when your usage requirements change, including its expiration time, description, and permissions.

  1. In the Robot Account list, select the Robot Account you want to update.

    Select robot account in the list

  2. Select Edit in the Action section.

    Edit button in Action

  3. Update the information in the dialog: Expiration time, Description, and/or Permissions. Click Edit to save.

    Robot account edit dialog

  4. Verify the information after updating.

    Robot account information after update

Disable a robot account​

When you need to temporarily suspend access for a Robot Account without deleting it, you can disable the account. A disabled Robot Account cannot authenticate until it is re-enabled.

  1. In the Robot Account list, select the Robot Account you want to disable, then select ACTION DISABLE.

    Select ACTION DISABLE

  2. In the confirmation dialog, enter DISABLE to confirm.

    Enter DISABLE to confirm

  3. Verify the Enabled State after disabling.

    Disabled state of robot account

Enable a robot account​

To restore access for a disabled Robot Account, follow the steps below. The Enable option only appears for accounts that are currently in the disabled state.

  1. In the Robot Account list, select the Robot Account you want to enable, then select ACTION ENABLE.

    Select ACTION ENABLE

  2. In the confirmation dialog, enter ENABLE to confirm.

    Enter ENABLE to confirm

  3. Verify the Enabled State after enabling.

    Enabled state of robot account

Delete a robot account​

When a Robot Account is no longer needed, you can delete it to clean up and reduce your security attack surface. FPT Cloud supports deleting one or multiple Robot Accounts at the same time.

danger

Deleting a Robot Account cannot be undone. CI/CD pipelines using this account will immediately lose access.

  1. In the Robot Account list, select the Robot Account to delete, then select ACTION DELETE.

    Select ACTION DELETE

    To delete multiple Robot Accounts at once, select multiple accounts before performing the action.

    Select multiple robot accounts for deletion

  2. In the confirmation dialog, enter DELETE to confirm the deletion.

    Enter DELETE to confirm

  3. Verify the list after deletion.

    Robot account list after deletion

Refresh a robot account secret​

A Robot Account Token is only shown once at creation. When a Token is lost or needs to be replaced for security reasons, FPT Cloud lets you regenerate the secret without deleting and recreating the Robot Account.

  1. In the Robot Account list, select the Robot Account to refresh, then select ACTION REFRESH SECRET.

    Select ACTION REFRESH SECRET

  2. Choose one of two methods to refresh the secret.

    Method 1 - Automatic. The system generates a new secret. Copy it or click Export to File to save.

    Automatic secret refresh

    Save new secret dialog

    Method 2 - Manual. Enter a custom secret yourself.

    Manual secret configuration

warning

After refreshing, update the new secret in all pipelines and systems that use this Robot Account.

Use a robot account​

After creating a Robot Account, you can use its credentials to perform docker operations with the configured permissions (pull/push). Robot Accounts are ideal for use in CI/CD pipelines and automated environments.

Use the Token copied from the Portal or from an exported file to log in.

Use token for docker login

Verify the credentials using the docker login command.

docker login result with robot account

After logging in, use docker pull or docker push to verify the configured permissions.

note

If the Robot Account is deleted, disabled, or the Token has expired, docker login, docker pull, or docker push returns an "unauthorized to access repository" error. This error is also covered in the Troubleshooting guide.

Next steps​