Issue #8014
closed
Ensure that container-push repo endpoint is read-only
Description
It is possible to create and delete push repositories using API. It doesn't make sense, it doesn't benefit users in any way, it only potentially creates problems and adds complexity to the code and future RBAC.
Push repositories are automatically created during docker/podman push as a part of distribution creation. Push repositories are automatically removed when their distributions are removed.
Related issues
Updated by pulpbot over 2 years ago
- Status changed from NEW to POST
Updated by ipanova@redhat.com over 2 years ago
- Status changed from POST to CLOSED - NOTABUG
Updated by ipanova@redhat.com over 2 years ago
- Status changed from CLOSED - NOTABUG to NEW
I am re-opening this bug. Users not should be able to create push repos via api. A distribution should be created instead and if needed assign needed permissions ahead of push operation. Push-repo will be created only during 'podman push' operation or alongside with the distribution creation.
Updated by ipanova@redhat.com over 2 years ago
- Status changed from NEW to ASSIGNED
- Assignee set to ttereshc
Updated by ttereshc over 2 years ago
- Related to Story #8103: As a plugin writer, I have a read-only viewset for repository available in the plugin API added
Updated by ttereshc over 2 years ago
- Has duplicate Issue #7839: push repository can be created without a distribution added
Updated by ttereshc over 2 years ago
- Subject changed from Disable POST for container-push repo endpoint to Ensure that container-push repo endpoint is read-only
- Description updated (diff)
Updated by pulpbot over 2 years ago
- Status changed from ASSIGNED to POST
Added by ttereshc over 2 years ago
Added by ttereshc over 2 years ago
Make push repositories REST API read-only
Updated by ttereshc over 2 years ago
- Status changed from POST to MODIFIED
Applied in changeset 5978f4ceda73b2ab870fe094edad56d597188f31.
Updated by pulpbot over 2 years ago
- Status changed from MODIFIED to CLOSED - CURRENTRELEASE
.
Make push repositories REST API read-only
closes #8014 https://pulp.plan.io/issues/8014