From our testing in quay 3.8 the feature GLOBAL_READONLY_SUPER_USERS is not available to LDAP users.

Our client would like this feature implemented so that they can have an auditor account that is able to see and pull all images in the registry so that they can be scanned with an external vulnerability scanner(prisma). This was one of the features they were hoping to take advantage of in Quay 3.8

1. Proposed title of this feature request

>> Implement GLOBAL_READONLY_SUPER_USERS feature for LDAP user authentication

2. What is the nature and description of the request?

>> In quay 3.8 the feature GLOBAL_READONLY_SUPER_USERS is not available to LDAP users, only database authentication. We would like to be able to use the GLOBAL_READONLY_SUPER_USERS with LDAP users.

3. Why does the customer need this? (List the business requirements here)

>>So that we can have an auditor account that is able to see and pull all images in the registry so that they can be scanned with an external vulnerability scanner(prisma). Currently we have a work around of adding a Prizma service account to be a member of every org/repo but it is not ideal for us.

4. List any affected packages or components.

>> Quay

5. Do have any specific timeline dependencies and which release would they like to target?

>> Medium priority, we have a workaround for now but this feature would make scanning images with prizma easier to manage going forward. We do not have a specific timeline on when we ould like to see the release but preferably still in 3.8

6. Are you able to assist in testing this functionality if implemented?

>> Yes we would be happy to test this when ready