From 0697e011449d5c69a20542145312c089f7748492 Mon Sep 17 00:00:00 2001 From: Piotr Dobrowolski Date: Thu, 2 Jul 2020 18:32:24 +0200 Subject: [PATCH] cluster/kube/lib/registry: allow auth'd users to pull all images "Anyone can pull all images" rule did only match on anonymous users. Now it should match all users, including authenticated ones. Change-Id: I2205299093feca51f30526ba305eadbaa0a68ecb --- cluster/kube/lib/registry.libsonnet | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/kube/lib/registry.libsonnet b/cluster/kube/lib/registry.libsonnet index 2df6da69..d9094032 100644 --- a/cluster/kube/lib/registry.libsonnet +++ b/cluster/kube/lib/registry.libsonnet @@ -171,7 +171,7 @@ local kube = import "../../../kube/kube.libsonnet"; comment: "Logged in users can query the catalog.", }, { - match: {account: ""}, + match: {account: "/.*/"}, actions: ["pull"], comment: "Anyone can pull all images.", },