1
0
Fork 0

cluster/kube/lib/registry: allow auth'd users to pull all images

"Anyone can pull all images" rule did only match on anonymous users. Now
it should match all users, including authenticated ones.

Change-Id: I2205299093feca51f30526ba305eadbaa0a68ecb
master
informatic 2020-07-02 18:32:24 +02:00
parent 7418a5a963
commit 0697e01144
1 changed files with 1 additions and 1 deletions

View File

@ -171,7 +171,7 @@ local kube = import "../../../kube/kube.libsonnet";
comment: "Logged in users can query the catalog.",
},
{
match: {account: ""},
match: {account: "/.*/"},
actions: ["pull"],
comment: "Anyone can pull all images.",
},