子账号权限管理
可授权镜像仓库 Action 和对应资源
| Action | Action描述 | 资源 |
|---|---|---|
| comb:ccr:CreateRepo | 创建镜像仓库 | comb:ccr:${region}:*:* |
| comb:ccr:UpdateRepo | 更新镜像仓库 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:DeleteRepo | 删除镜像仓库 | comb:v:${region}:*:${username}/${repoName} |
| comb:ccr:GetRepos | 镜像仓库列表 | comb:ccr:${region}:*:* |
| comb:ccr:GetRepo | 镜像仓库详情 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:DeleteRepo | 删除镜像仓库 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:BuildImageDockerfile | Dockerfile构建镜像 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:BuildImageSrc | 源码构建镜像 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:BuildImageCI | 支持持续集成从源码构建镜像 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:SaveAs | 服务容器另存为镜像 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:DeleteImage | 删除镜像 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:GetRepoImages | 镜像仓库下的镜像列表 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:RollbackImage | 镜像回滚 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:GetDockerfile | 获取Dockerfile内容 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:GetBuildLog | 获取构建日志 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:GetLatestBuildInfo | 镜像仓库获取最近一次源码构建信息 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:GetCIInfo | 获取镜像仓库持续集成信息 | comb:ccr:${region}:*:${username}/${repoName} |
| comb:ccr:ListCIUserInfo | 持续集成获取用户信息 | comb:ccr:${region}:*:* |
| comb:ccr:ListCIRepos | 支持持续集成仓库列表 | comb:ccr:${region}:*:* |
| comb:ccr:ListIntegratedRepos | 支持持续集成刷新重新获取仓库列表 | comb:ccr:${region}:*:* |
| comb:ccr:RevokeGrants | 持续集成解除关联 | comb:ccr:${region}:*:* |
| comb:ccr:AuthGitHub | 持续集成关联GitHub | comb:ccr:${region}:*:* |
| comb:ccr:AuthGitLab | 持续集成关联GitLab | comb:ccr:${region}:*:* |
Note
1.${region}表示分区名称，目前支持 * 、cn-east-1、cn-north-1，其中 * 表示所有分区，cn-east-1表示杭州分区，cn-north-1表示北京分区
2.${username}与${repoName}分别表示用户名称及仓库名称
镜像仓库 API 接口与对应 Action
| API | API描述 | Action |
|---|---|---|
| POST /api/v1/repositories | 创建镜像仓库 | comb:ccr:CreateRepo |
| GET /api/v1/repositories | 镜像仓库列表 | comb:ccr:GetRepos |
| GET api/v1/repositories/{id} | 镜像仓库详情 | comb:ccr:GetRepo |
| DELETE /api/v1/repositories/{repoId} | 删除镜像仓库 | comb:ccr:DeleteRepo |
| POST /api/v1/repositories/v2/image | Dockerfile构建镜像 | comb:ccr:BuildImageDockerfile |
| DELETE api/v1/repositories/{repoName}/tags/{tag} | 删除镜像 | comb:ccr:DeleteImage |
| GET api/v1/repositories/{id}/tags | 镜像列表 | comb:ccr:GetRepoImages |
| POST /api/v1/microservice/container/{containerId}/image/actions/save | 服务容器另存为镜像 | comb:ccr:SaveAs |
策略管理
镜像仓库管理权限 (CcrFullAccess) 包括如下 Action:
- comb:ccr:CreateRepo
- comb:ccr:UpdateRepo
- comb:ccr:DeleteRepo
- comb:ccr:GetRepos
- comb:ccr:GetRepo
- comb:ccr:DeleteRepo
- comb:ccr:BuildImageDockerfile
- comb:ccr:BuildImageSrc
- comb:ccr:BuildImageCI
- comb:ccr:SaveAs
- comb:ccr:GetRepoImages
- comb:ccr:DeleteImage
- comb:ccr:RollbackImage
- comb:ccr:GetDockerfile
- comb:ccr:GetBuildLog
- comb:ccr:GetLatestBuildInfo
- comb:ccr:GetCIInfo
- comb:ccr:ListCIUserInfo
- comb:ccr:ListCIRepos
- comb:ccr:ListIntegratedRepos
- comb:ccr:RevokeGrants
- comb:ccr:AuthGitHub
- comb:ccr:AuthGitLab
镜像仓库只读权限 (CcrReadOnlyAccess) 包括如下 Action:
- comb:ccr:GetRepos
- comb:ccr:GetRepo
- comb:ccr:GetRepoImages
- comb:ccr:GetDockerfile
- comb:ccr:GetBuildLog
- comb:ccr:GetLatestBuildInfo
- comb:ccr:GetCIInfo
- comb:ccr:ListCIUserInfo
- comb:ccr:ListCIRepos
- comb:ccr:ListIntegratedRepos
