Feature #39239: RBAC - role allowing to pull only from specified Lifecycle Environment - Katello - Foreman

Actions

Copy link

Feature #39239

open

RBAC - role allowing to pull only from specified Lifecycle Environment

Added by maciej markowski about 2 months ago. Updated about 2 months ago.

Status:

New

Priority:

Normal

Assignee:

Category:

Container

Target version:

Difficulty:

Triaged:

Yes

Bugzilla link:

Pull request:

Fixed in Releases:

Found in Releases:

Katello 4.19.1

Red Hat JIRA:

Description

I was trying to create a role that will allow user for pulling images only from certain LCE, but it still has permissions to pull from library. Is it even possible?

Sample ansible task I was using:

- name: Create TEST Pull Role
      theforeman.foreman.role:
        server_url: "{{ foreman_server_url }}" 
        username: "{{ foreman_admin_user }}" 
        password: "{{ foreman_admin_pwd }}" 
        name: "Container Puller TEST" 
        filters:
          - permissions:
              - view_products
            search: "name = 'OCI registry'" 
          - permissions:
              - view_lifecycle_environments
            search: "name = 'TEST'" 
          - permissions:
              - view_content_views
            search: "name ~ 'TEST'" 
          - permissions:
              - view_organizations
            search: "" 
          - permissions:
              - view_locations
            search: "" 
          - permissions:
              - view_images
            search: "" 
          - permissions:
              - create_personal_access_tokens
              - view_personal_access_tokens
            search: "" 
        state: present