coreweave_container_registry_namespace (Resource)

​

Example usage

resource "coreweave_container_registry_namespace" "images" {
  name                = "example-images"
  zone                = "US-LAB-01A"
  storage_quota_bytes = 107374182400
  force_destroy       = false

  timeouts = {
    create = "30m"
    delete = "30m"
  }
}

​

Schema

​

Required

• name (String) Namespace name used in the registry hostname, such as example-images. Changing it replaces the namespace.
• zone (String) Upper-case zone identifier. Changing it replaces the namespace.

​

Optional

• force_destroy (Boolean) Irreversibly delete content on destroy. Apply this setting before destroying; never enabled automatically.
• initial_access_configuration (Attributes) Historical create-only input. Omission selects the server default; atomically installs deny-all. Any change replaces the namespace. Import leaves this null; adding it after import replaces the namespace. (see below for nested schema)
• storage_quota_bytes (Number) Namespace ceiling in bytes. Omission/null clears the ceiling; zero disables pushes after evaluation.
• timeouts (Attributes) (see below for nested schema)

​

Read-Only

• access_mode (Attributes) Current effective namespace access mode. (see below for nested schema)
• content_status (Attributes) Server-reported storage usage and content counts. These observations may lag content changes. (see below for nested schema)
• created_at (String) Creation timestamp in RFC3339 format.
• created_by (Attributes) Identity that created the namespace. (see below for nested schema)
• dns_name (String) Registry hostname used for OCI pushes and pulls.
• etag (String) Current concurrency token. Changes when the server updates the resource.
• id (String) Canonical API resource name used as the Terraform identifier.
• org_id (String) Organization that owns the namespace.
• status (String) Current namespace provisioning state.
• updated_at (String) Last update timestamp in RFC3339 format.
• updated_by (Attributes) Identity that last updated the namespace. (see below for nested schema)

​

Nested Schema for initial_access_configuration

• policy_sets (Attributes Map) Authoritative policy sets keyed by stable IDs. Omitted entries are removed. COREWEAVE_KUBERNETES is deprecated; use WORKLOAD_FEDERATION. (see below for nested schema)
• request_ip_acl (Attributes) Optional request filter. At least one allow or deny network is required; omission removes the ACL. An ACL grants no authorization. (see below for nested schema)

​

Nested Schema for initial_access_configuration.policy_sets

• identity_selector (String) Identity class evaluated by this policy set. Supported values: COREWEAVE, WORKLOAD_FEDERATION, ANY_AUTHENTICATED, ANONYMOUS, COREWEAVE_KUBERNETES. COREWEAVE_KUBERNETES is deprecated; use WORKLOAD_FEDERATION.
• rules (Attributes Map) Authoritative rules keyed by stable IDs. Omitted rules are removed. (see below for nested schema)

​

Nested Schema for initial_access_configuration.policy_sets.rules

• expression (String) CEL expression evaluated against the request identity and context.

​

Nested Schema for initial_access_configuration.request_ip_acl

• allow_cidrs (Set of String) Canonical IPv4 or IPv6 networks; host bits and IPv4-mapped IPv6 are rejected.
• deny_cidrs (Set of String) Canonical IPv4 or IPv6 networks; host bits and IPv4-mapped IPv6 are rejected.

​

Nested Schema for timeouts

• create (String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as ”30s” or “2h45m”. Valid time units are “s” (seconds), “m” (minutes), “h” (hours).
• delete (String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as ”30s” or “2h45m”. Valid time units are “s” (seconds), “m” (minutes), “h” (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
• read (String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as ”30s” or “2h45m”. Valid time units are “s” (seconds), “m” (minutes), “h” (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
• update (String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as ”30s” or “2h45m”. Valid time units are “s” (seconds), “m” (minutes), “h” (hours).

​

Nested Schema for access_mode

• mode (String) Effective access mode reported by the server.
• reasons (Set of String) Server-reported reasons for the effective access mode.
• updated_at (String) Last update timestamp in RFC3339 format.

​

Nested Schema for content_status

• blob_count (Number) Number of stored blobs.
• manifest_count (Number) Number of stored manifests.
• repository_count (Number) Number of repositories.
• tag_count (Number) Number of tags.
• updated_at (String) Last update timestamp in RFC3339 format.
• usage_bytes (Number) Total stored content size in bytes.

​

Nested Schema for created_by

• user_uid (String) CoreWeave user identifier.
• username (String) CoreWeave username.

​

Nested Schema for updated_by

• user_uid (String) CoreWeave user identifier.
• username (String) CoreWeave username.

​

Import

terraform import coreweave_container_registry_namespace.images example-images