Docker Image Registry - Allow Plugin Push
Summary
Cannot push a Docker plugin to the GitLab container registry.
Steps to reproduce
$ docker login gitlab.internal:6000
Login Succeeded
$ docker plugin push gitlab.internal:6000/mygroup/myrepo
xxxxxxxxxxxx: Preparing
denied: requested access to the resource is denied
What is the current bug behavior?
Permission gets denied if the JWT token scope is repository(plugin)
.
What is the expected correct behavior?
The ContainerRegistryAuthenticationService
should accept the repository(plugin)
scope.
Possible fixes
There should be an additional scope allowed in /app/services/auth/container_registry_authentication_service.rb
.