Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-4523

Quay 3.8.0 superuser can't reconfigure the quota to override the default quota settings

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • quay-v3.8.0
    • -area/quota, quay
    • False
    • None
    • False

      Description:

      This is an issue of Quay 3.8.0 Quota configurations, when deployed quay with default Quota configuration, later login Quay with superuser, found can't reconfigure the Quota size, get error message "You do not have sufficient permissions to perform the action.", here the login user is quay superuser, it should have enough permissions to reconfigure the quota for all organiations, pls review this issue.

      Quay Image: quay-operator-bundle-container-v3.8.0-91

      Quay config.yaml:

      ALLOW_PULLS_WITHOUT_STRICT_LOGGING: false
      AUTHENTICATION_TYPE: Database
      AVATAR_KIND: local
      BUILDLOGS_REDIS:
        host: quay378-quay-redis
        port: 6379
      DATABASE_SECRET_KEY: 9JkpMxfKk2SqJ5IfSi0OKEkfolbridQX72BZPNLZ11oA28oQGzWBgw7BlongRwaR6RH2knsjFd9Z2Kwx
      DB_CONNECTION_ARGS:
        autorollback: true
        threadlocals: true
      DB_URI: postgresql://quay378-quay-database:rJgt4KrBIKDe7yJ9W8u1NwzLzyp2GwWSSAmZj8hnxboBs2JuuOYWSTYa5oaRZz9-ZIPNY6fBaXSAyzuZ@quay378-quay-database:5432/quay378-quay-database
      DEFAULT_SYSTEM_REJECT_QUOTA_BYTES: 302400000
      DEFAULT_TAG_EXPIRATION: 2w
      DISTRIBUTED_STORAGE_CONFIG:
        local_us:
        - RHOCSStorage
        - access_key: T2uyrfaDUj7PgTkkeiPi
          bucket_name: quay-datastore-39b599f6-f2b2-4381-a836-7306a0b1eb6a
          hostname: s3.openshift-storage.svc.cluster.local
          is_secure: true
          port: 443
          secret_key: ******
          storage_path: /datastorage/registry
      DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS:
      - local_us
      DISTRIBUTED_STORAGE_PREFERENCE:
      - local_us
      ENTERPRISE_LOGO_URL: /static/img/RH_Logo_Quay_Black_UX-horizontal.svg
      EXTERNAL_TLS_TERMINATION: true
      FEATURE_ACTION_LOG_ROTATION: false
      FEATURE_ANONYMOUS_ACCESS: true
      FEATURE_APP_SPECIFIC_TOKENS: true
      FEATURE_BITBUCKET_BUILD: false
      FEATURE_BLACKLISTED_EMAILS: false
      FEATURE_BUILD_SUPPORT: true
      FEATURE_CHANGE_TAG_EXPIRATION: true
      FEATURE_DIRECT_LOGIN: true
      FEATURE_EXTENDED_REPOSITORY_NAMES: true
      FEATURE_FIPS: false
      FEATURE_GITHUB_BUILD: false
      FEATURE_GITHUB_LOGIN: false
      FEATURE_GITLAB_BUILD: false
      FEATURE_GOOGLE_LOGIN: false
      FEATURE_INVITE_ONLY_USER_CREATION: false
      FEATURE_MAILING: false
      FEATURE_NONSUPERUSER_TEAM_SYNCING_SETUP: false
      FEATURE_PARTIAL_USER_AUTOCOMPLETE: true
      FEATURE_PROXY_CACHE: true
      FEATURE_PROXY_STORAGE: true
      FEATURE_QUOTA_MANAGEMENT: true
      FEATURE_REPO_MIRROR: true
      FEATURE_RESTRICTED_USERS: true
      FEATURE_SECURITY_NOTIFICATIONS: true
      FEATURE_SECURITY_SCANNER: true
      FEATURE_STORAGE_REPLICATION: false
      FEATURE_SUPERUSERS_FULL_ACCESS: true
      FEATURE_TEAM_SYNCING: false
      FEATURE_UI_V2: true
      FEATURE_USER_CREATION: true
      FEATURE_USER_LAST_ACCESSED: true
      FEATURE_USER_LOG_ACCESS: false
      FEATURE_USER_METADATA: false
      FEATURE_USER_RENAME: false
      FEATURE_USERNAME_CONFIRMATION: true
      FRESH_LOGIN_TIMEOUT: 10m
      GITHUB_LOGIN_CONFIG: {}
      GITHUB_TRIGGER_CONFIG: {}
      GITLAB_TRIGGER_KIND: {}
      LDAP_ALLOW_INSECURE_FALLBACK: false
      LDAP_EMAIL_ATTR: mail
      LDAP_UID_ATTR: uid
      LDAP_URI: ldap://localhost
      LOGS_MODEL: database
      LOGS_MODEL_CONFIG: {}
      MAIL_DEFAULT_SENDER: support@quay.io
      MAIL_PORT: 587
      MAIL_USE_AUTH: false
      MAIL_USE_TLS: false
      PREFERRED_URL_SCHEME: https
      REGISTRY_TITLE: Red Hat Quay
      REGISTRY_TITLE_SHORT: Red Hat Quay
      REPO_MIRROR_INTERVAL: 30
      REPO_MIRROR_TLS_VERIFY: true
      RESTRICTED_USER_READ_ONLY: true
      RESTRICTED_USERS_WHITELIST:
      - demo
      SEARCH_MAX_RESULT_PAGE_COUNT: 10
      SEARCH_RESULTS_PER_PAGE: 10
      SECRET_KEY: v9pprXGAeOXrZi4CdvC-73mUCFVtKjD2f7uyExDnPJdbqOHyGrHSclaPce9W6gRmT0G5GNQ1NCs5lHmP
      SECURITY_SCANNER_INDEXING_INTERVAL: 30
      SECURITY_SCANNER_V4_ENDPOINT: http://quay378-clair-app.quay378.svc.cluster.local
      SECURITY_SCANNER_V4_NAMESPACE_WHITELIST:
      - admin
      SECURITY_SCANNER_V4_PSK: SmU5Y2t2ZzVwUm50MmY4U0Y5STdET3ZHMmxmbW1oSzg=
      SERVER_HOSTNAME: quay378-quay-quay378.apps.quaytest-13189.qe.devcluster.openshift.com
      SETUP_COMPLETE: true
      SUPER_USERS:
      - quay
      TAG_EXPIRATION_OPTIONS:
      - 2w
      TEAM_RESYNC_STALE_TIME: 60m
      TESTING: false
      USER_EVENTS_REDIS:
        host: quay378-quay-redis
        port: 6379
      USER_RECOVERY_TOKEN_LIFETIME: 30m 
      Quay Superuser

              Unassigned Unassigned
              lzha1981 luffy zhang
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: