Thanks, will system:unauthenticated not open up the registry to people who are not authenticated at all? Also where do these permissions need to be added?
I have created a new service account that is dedicated to pushing the images, this has been given the cluster permission of registry-admin. The goal is to now have the images available to be pulled in to any project.Thanks again,DaveOn Wed, Aug 22, 2018 at 2:42 PM David Eads <deads redhat com> wrote:They are groups. "system:authenticated" and "system:unauthenticated" and you probably want to assign both.On Wed, Aug 22, 2018 at 9:39 AM Ben Parees <bparees redhat com> wrote:On Wed, Aug 22, 2018 at 6:51 AM, David Conde <david donedeal ie> wrote:Is it possible to add global pull permissions to a project in the registry? I'm looking to have a single place for pushing images to that all projects can access, similar to how the Openshift project works for image and template access.you should be able to add appropriate permissions to the "system:authenticated" role which would allow any authenticated user to access it. CCing David+Jordan who may have a more preferred approach.Thanks,Dave
users mailing list
users lists openshift redhat
--Ben Parees | OpenShift