Skip to content

If user can push to docker then it can delete too

What does this MR do?

Implements a simple solution to #40096 (closed). Docker permissions for the ci user have been extended, if the user has permission to push, then it has permission to delete as well.

Risks

This will allow the job to delete tags/images unrelated to the build, allowing the user to potentially remove unwanted tags/images.

Closes #40096 (closed)

Does this MR meet the acceptance criteria?

Conformity

Performance and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Closes #40096 (closed)

Edited by Thong Kuah

Merge request reports