NAME ROLE USERS GROUPS
SERVICE ACCOUNTS SUBJECTS
shared-resource-viewers openshift/shared-resource-viewer
system:authenticated
^^ Is that the guy?
On Wed, Aug 22, 2018 at 2:54 PM David Eads <[email protected]> wrote:
> My mistake. We only bind the openshift namespace to system:authenticated
>
> On Wed, Aug 22, 2018 at 9:49 AM David Conde <[email protected]> wrote:
>
>> Thanks, will system:unauthenticated not open up the registry to people
>> who are not authenticated at all? Also where do these permissions need to
>> be added?
>>
>> I have created a new service account that is dedicated to pushing the
>> images, this has been given the cluster permission of registry-admin. The
>> goal is to now have the images available to be pulled in to any project.
>>
>> Thanks again,
>> Dave
>>
>> On Wed, Aug 22, 2018 at 2:42 PM David Eads <[email protected]> wrote:
>>
>>> They are groups. "system:authenticated" and "system:unauthenticated"
>>> and you probably want to assign both.
>>>
>>> On Wed, Aug 22, 2018 at 9:39 AM Ben Parees <[email protected]> wrote:
>>>
>>>>
>>>>
>>>> On Wed, Aug 22, 2018 at 6:51 AM, David Conde <[email protected]> wrote:
>>>>
>>>>> Is it possible to add global pull permissions to a project in the
>>>>> registry? I'm looking to have a single place for pushing images to that
>>>>> all
>>>>> projects can access, similar to how the Openshift project works for image
>>>>> and template access.
>>>>>
>>>>
>>>> you should be able to add appropriate permissions to the
>>>> "system:authenticated" role which would allow any authenticated user to
>>>> access it. CCing David+Jordan who may have a more preferred approach.
>>>>
>>>>
>>>>
>>>>
>>>>>
>>>>> Thanks,
>>>>> Dave
>>>>>
>>>>> _______________________________________________
>>>>> users mailing list
>>>>> [email protected]
>>>>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>> Ben Parees | OpenShift
>>>>
>>>>
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users
