My mistake. We only bind the openshift namespace to system:authenticated On Wed, Aug 22, 2018 at 9:49 AM David Conde <[email protected]> wrote:
> Thanks, will system:unauthenticated not open up the registry to people who > are not authenticated at all? Also where do these permissions need to be > added? > > I have created a new service account that is dedicated to pushing the > images, this has been given the cluster permission of registry-admin. The > goal is to now have the images available to be pulled in to any project. > > Thanks again, > Dave > > On Wed, Aug 22, 2018 at 2:42 PM David Eads <[email protected]> wrote: > >> They are groups. "system:authenticated" and "system:unauthenticated" and >> you probably want to assign both. >> >> On Wed, Aug 22, 2018 at 9:39 AM Ben Parees <[email protected]> wrote: >> >>> >>> >>> On Wed, Aug 22, 2018 at 6:51 AM, David Conde <[email protected]> wrote: >>> >>>> Is it possible to add global pull permissions to a project in the >>>> registry? I'm looking to have a single place for pushing images to that all >>>> projects can access, similar to how the Openshift project works for image >>>> and template access. >>>> >>> >>> you should be able to add appropriate permissions to the >>> "system:authenticated" role which would allow any authenticated user to >>> access it. CCing David+Jordan who may have a more preferred approach. >>> >>> >>> >>> >>>> >>>> Thanks, >>>> Dave >>>> >>>> _______________________________________________ >>>> users mailing list >>>> [email protected] >>>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users >>>> >>>> >>> >>> >>> -- >>> Ben Parees | OpenShift >>> >>>
_______________________________________________ users mailing list [email protected] http://lists.openshift.redhat.com/openshiftmm/listinfo/users
