Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Task: proxy cache user story - Cache RBAC #11865

Closed
xaleeks opened this issue May 9, 2020 · 2 comments
Closed

Task: proxy cache user story - Cache RBAC #11865

xaleeks opened this issue May 9, 2020 · 2 comments
Assignees
@reasonerjt @stonezdj
Labels
area/proxy-cache target/2.1.0 task

Comments

@xaleeks
Copy link
Contributor

xaleeks commented May 9, 2020

This issue is a sub-task of the Proxy Cache epic (#11658)

Cache RBAC
【P0】As a user, I can only pull from a proxy project and cannot manually push to it. Proxy projects are only populated from its upstream. If I try to push, I should get an error that ‘you are prohibited from pushing to a proxy project’. I can also configure RBAC for all caches (default set of users configured at Caches level), and can configure caches as public or private.
@stonezdj
Copy link
Contributor

The normal RBAC is done by Harbor core, there is a harbor_proxyservice identity need to grant push permission to it and check it when used.

@stonezdj
Copy link
Contributor

Disable push is done by PR #12404 , close it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@reasonerjt reasonerjt

@stonezdj stonezdj

Labels
area/proxy-cache target/2.1.0 task
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@reasonerjt @stonezdj @xaleeks