Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Per-project container registry mapping (or RBAC) #1908

Open
kyujin-cho opened this issue Feb 15, 2024 · 1 comment · May be fixed by #3065
Open

Per-project container registry mapping (or RBAC) #1908

kyujin-cho opened this issue Feb 15, 2024 · 1 comment · May be fixed by #3065
Assignees
@jopemachine
Labels
comp:manager Related to Manager component
Milestone
24.03

Comments

@kyujin-cho
Copy link
Member

kyujin-cho commented Feb 15, 2024 •
edited by achimnol
Loading

After #1907 is resolved, we can create a new table to define relations between user/project and container registry.

Goal

  • Every users should be capable of having container registry dedicated to itself.
  • Same rule applies to project, and in this case every users residing in that project can benefit from such registries.
    • Along with our long-term project-first architecture, let's make m2m relationship of projects and container registries.

Technical considerations

  • A project can have access to multiple container registries, and a single container registry may be shared by multiple projects.
  • @fregataa How could we replace the per-project accessibility (m2m relationship) with the RBAC subsystem?
@kyujin-cho kyujin-cho mentioned this issue Feb 15, 2024
Open
@kyujin-cho kyujin-cho added this to the 24.03 milestone Feb 15, 2024
@kyujin-cho kyujin-cho added the comp:manager Related to Manager component label Feb 15, 2024
@kyujin-cho kyujin-cho mentioned this issue Feb 15, 2024
Open
@jopemachine jopemachine mentioned this issue Mar 16, 2024
Draft
3 tasks
@jopemachine jopemachine linked a pull request Mar 16, 2024 that will close this issue
feat: Add association table between ContainerRegistries with Users #1960
Draft
3 tasks
@achimnol achimnol changed the title Define many-to-many table to represent relations between user scope (project or individual user) and container registry Per-project container registry mapping Nov 4, 2024
@achimnol achimnol changed the title Per-project container registry mapping Per-project container registry mapping (or RBAC) Nov 4, 2024
@jopemachine jopemachine mentioned this issue Nov 6, 2024
Open
2 tasks
@jopemachine
Copy link
Member

After reviewing, we concluded that we still need to create an m2m table even with RBAC applied. I will proceed with this task within the following PR stack. (#3036)

@jopemachine jopemachine linked a pull request Nov 11, 2024 that will close this issue
Open
2 tasks
@jopemachine jopemachine self-assigned this Nov 11, 2024
This was linked to pull requests Nov 19, 2024
feat: Implement Image RBAC project scope #3035
Open
feat: Implement m2m table for container_registries, and groups #3065
Open
This was unlinked from pull requests Nov 19, 2024
feat: Implement Image RBAC project scope #3035
Open
feat: Add association table between ContainerRegistries with Users #1960
Draft
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jopemachine jopemachine

Labels
comp:manager Related to Manager component
Projects
None yet
Milestone
24.03
Development

Successfully merging a pull request may close this issue.

feat: Implement m2m table for container_registries, and groups lablup/backend.ai
2 participants
@kyujin-cho @jopemachine