allowed_images with asterisk tag does not allow image without tag
If you specify an allowed image with an asterisk tag, e.g. allowed_images = ["registry.example.org/group/project:*"]
, gitlab runner will not let you use just the image name in .gitlab-ci.yml, e.g. image: registry.example.org/group/project
, you have to specify a tag, e.g. image: registry.example.org/group/project:latest
.
On the other hand allowed_images = ["registry.example.org/group/project"]
only lets you use the image without a tag, which doesn't really make sense either . I think it should be equivalent to "registry.example.org/group/project:*"
.
You have to combine the two to actually allow any tag and just the image name: allowed_images = ["registry.example.org/group/project", "registry.example.org/group/project:*"]
.