Can not delete a container with skopeo delete
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 31
- Forks
- 56
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 22
Description
Version
pulp core 3.62.0
pulp container 2.21.0
Describe the bug
Given a namespace for a registry and a user with the role container.containernamespace_collaborator on that namespace.
The user can do a podman login followed by a podman push of the container.
However if the user wants to delete the pushed image from the remote with skopeo login followed by a skopeo delete it is not allowed.
The user is confronted with one of the following error messages:
FATA[0001] deleting requested access to the resource is denied
FATA[0002] deleting unsupported: Method "DELETE" not allowed.
To Reproduce
Steps to reproduce the behavior:
podman login to registry
podman push an image
skopeo login to registry
skopeo delete the image
Expected behavior
skopeo delete can delete pushed images. Provided the user has appropriate permissions
Additional context
Not sure if this is a duplicate of https://github.com/pulp/pulp_container/issues/480
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the reported podman push followed by skopeo delete flow using a user with the container namespace collaborator role. Trace the registry DELETE request and its permission check, then verify that an appropriately authorized user can delete the pushed image while unauthorized users remain denied.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, authorization
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100