Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-6883

Quay should allow docker/podman CLI to login Quay image registry via OIDC authentication when the Authentication type is OIDC

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • quay-v3.11.0, quay-v3.15.1
    • quay
    • False
    • Hide

      None

      Show
      None
    • False

      Description:

      This is an issue of Quay 3.11 new feature "Allow team synchronization via OIDC on Azure", when the authentication_type is OIDC, Quay Customers should be able to use Docker/Podman Client to login Quay Image Registry via OIDC authentication rather than database authentication, pls review this issue.

      Quay: quay-operator-bundle-container-v3.11.0-29

      Quay Config.yaml:

      AUTHENTICATION_TYPE: OIDC
      FEATURE_TEAM_SYNCING: true
      FEATURE_NONSUPERUSER_TEAM_SYNCING_SETUP: true
      AZUREID_LOGIN_CONFIG:
        CLIENT_ID: ******
        CLIENT_SECRET: ******
        LOGIN_SCOPES: [ 'openid', 'roles' ]
        PREFERRED_GROUP_CLAIM_NAME: groupNames
        OIDC_SERVER: https://login.microsoftonline.com/250926f3-c788-4a52-acfa-e3aac5386ac1/v2.0/
        SERVICE_NAME: AzureAD 

              Unassigned Unassigned
              lzha1981 luffy zhang
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: