search

goharbor / harbor

An open source trusted cloud native registry project that stores, signs, and scans content.
https://goharbor.io
Apache License 2.0
24.12k stars 4.76k forks source link

REST API access token with reduced permissions #16937

Open cobexer opened 2 years ago

cobexer commented 2 years ago

While automating the configuration of System Robot Accounts we currently need a login with system administrative access.

Describe the solution you'd like I want to create an api access key with a specific feature set like:

Describe the main design/architecture of your solution A dialog for creating access tokens with specified access scopes so that I am able to only pass permissions related to System Robot Accounts to the automated tool that manages them.

Describe the development plan you've considered As a user of harbor I do not know about development internals.

Additional context Example token creation flow in GitLab: grafik

github-actions[bot] commented 2 years ago

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

github-actions[bot] commented 2 years ago

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

PG2000 commented 2 years ago

+1 really need this.

freudl commented 2 years ago

Indeed, this would help a lot.

LeMace commented 2 years ago

i would really like that feature

slushysnowman commented 2 years ago

Something along these lines would be really useful - basically robot accounts that potentially have configurable full API access would be great