Docker API Proxy - Githubissues

seabreeze-project / seabreeze

🌊 [WIP] Seabreeze is a really simple container orchestration tool with superpowers.

https://seabreeze.run

MIT License

1 stars 0 forks source link

Docker API Proxy #2

Open secondtruth opened 4 months ago

secondtruth commented 4 months ago

Implement a Docker API Proxy to control and restrict access to Docker endpoints.

Details

Endpoint Restrictions: Allow users to specify which Docker API endpoints are accessible.
Configuration: Users should be able to define allowed endpoints in
- the project manifest (?)
- the global configuration (?)
- both (?)

Optional Features

Logging and Monitoring: Provide logs to monitor access and usage of Docker API endpoints.

Example Configuration

Example configuration block for this feature:

proxy:
  allowed_endpoints:
    - "containers"
    - "images"
    - "volumes"
    - "networks"
    - "services"
    - "tasks"
    - "events"
    - "version"
    - "info"
    - "ping"
  socket_file: "/tmp/docker.sock"
  mode: "0644"
  owner: "user:group"

Libraries

https://github.com/seabreeze-project/seabreeze/tree/main/proxy

Tasks

[X] Implement basic library
[ ] Implement service subroutine for running one global proxy
[ ] Improve service subroutine to enable multiple, concurrently running proxies per project