Copy dataplane and MCP server images from the source registry (authenticated with service account) to a destination registry.
By default all dataplane images and all 16 MCP server images are mirrored. Use
--exclude-mcp to skip the MCP fleet entirely, or --mcp-servers to mirror a subset.
Examples:
# Copy images using pinned tags embedded in the CLI build
TETRATE_REGISTRY_URL=registry.staging.tetrate.ai tetrate agentrouter dataplane images copy sa.json --to=gcr.io/myproject
# Copy images and retag (source tag -> destination tag)
TETRATE_REGISTRY_URL=registry.staging.tetrate.ai tetrate agentrouter dataplane images copy sa.json --to=gcr.io/myproject --tag=0.0.1-alpha.1->1.0.0
# Copy images with the same tag (for all images)
TETRATE_REGISTRY_URL=registry.staging.tetrate.ai tetrate agentrouter dataplane images copy sa.json --to=gcr.io/myproject --tag=0.0.1-alpha.1
# Skip MCP server images entirely (customers who won't run tetrate agentrouter dataplane mcp install)
TETRATE_REGISTRY_URL=registry.staging.tetrate.ai tetrate agentrouter dataplane images copy sa.json --to=gcr.io/myproject --exclude-mcp
# Mirror only a subset of MCP servers
TETRATE_REGISTRY_URL=registry.staging.tetrate.ai tetrate agentrouter dataplane images copy sa.json --to=gcr.io/myproject --mcp-servers=jira,slack
Usage:
tetrate agentrouter dataplane images copy [service-account.json] [flags]
Flags:
--exclude-mcp Skip all MCP server images. Use this if you don't intend to run 'tetrate agentrouter dataplane mcp install' against this registry.
--mcp-servers string Mirror only the listed MCP servers (comma-separated, e.g. jira,slack). Mutually exclusive with --exclude-mcp. Default: all 16 servers.
--registry string Source registry URL (can also use TETRATE_REGISTRY_URL env var)
--tag string Override tag for all images. Format: 'tag' or 'sourceTag->destTag' for retagging (optional; defaults to pinned tags embedded in the CLI build)
--timeout duration Timeout for each image copy operation (default 1h0m0s)
--to string Destination registry (required)
Global Flags:
-q, --quiet Suppress progress output; only errors and the final summary go to stderr
-v, --verbose Verbose output: plain-mode progress lines plus full per-blob chunk logs to stderr