Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-10196

PreMerge testing: repos in proxy cache orgs still can be editable

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • quay-v3.16.1
    • quay
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • False

      Description:

      According to https://github.com/quay/quay/pull/4796, 

      • Admin scope for proxy cache orgs

      should be blocked in this kind orgs.

      But from UI, we can see the repo and tag can still editable

      #podman push from cli is blocked with is correct
      #not exist
      podman push localhost:8080/proxycacheorg/repo1:busybox --tls-verify=false
      Getting image source signatures
      Copying blob sha256:b24b2272e25f702b65c501d8edfd10d2fd306defe50a83f726e4843fe2ada486
      Copying blob sha256:c632c18da752b68a8b703d8d09b07216198275c8fdeba1058aae60cb111e4d6e
      Error: writing blob: initiating layer upload to /v2/proxycacheorg/repo1/blobs/uploads/ in localhost:8080: unauthorized: access to the requested resource is not authorized
      
      #exist
      % podman push localhost:8080/proxycacheorg/quay-qetest/oraclelinux --tls-verify=false 
      Getting image source signatures
      Copying blob sha256:a68802128a1f62f94a310b4dc3a3a25aa0fecd10bed6eea19416626ddc1e5f79
      Copying config sha256:f4a1f2c861ca52c254cdbddcd1a8c8626e3da036f092b0f485480dbb8aee1226
      Writing manifest to image destination
      Error: writing manifest: uploading manifest latest to localhost:8080/proxycacheorg/quay-qetest/oraclelinux: unauthorized: access to the requested resource is not authorized
       
       

              Unassigned Unassigned
              szhao@redhat.com Sean Zhao
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: