Skip to content

Per-project container registry mapping (or RBAC) #1908

@kyujin-cho

Description

@kyujin-cho

After #1907 is resolved, we can create a new table to define relations between user/project and container registry.

Goal

  • Every users should be capable of having container registry dedicated to itself.
  • Same rule applies to project, and in this case every users residing in that project can benefit from such registries.* Along with our long-term project-first architecture, let's make m2m relationship of projects and container registries.

Technical considerations

  • A project can have access to multiple container registries, and a single container registry may be shared by multiple projects.
  • @fregataa How could we replace the per-project accessibility (m2m relationship) with the RBAC subsystem?

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions