Allow copying unowned images by policy

Registered by Dan Smith on 2020-07-02

Allow users to copy images they do not own (using import_image(method='copy=image') if policy allows

Blueprint information

Status:
Not started
Approver:
None
Priority:
Undefined
Drafter:
Dan Smith
Direction:
Needs approval
Assignee:
Dan Smith
Definition:
New
Series goal:
None
Implementation:
Unknown
Milestone target:
None

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.opendev.org/#/q/topic:bp/copy-unowned-image

Addressed by: https://review.opendev.org/740444
    Don't include plugins on 'copy-image' import

Addressed by: https://review.opendev.org/738701
    Refactor common auth token code in images test

Addressed by: https://review.opendev.org/738702
    Add a functional test for non-owned image copying

Addressed by: https://review.opendev.org/738102
    Refactor TaskFactory and Executor to take an admin ImageRepo

Addressed by: https://review.opendev.org/738871
    Add context.elevated() helper for getting admin privileges

Addressed by: https://review.opendev.org/738103
    Make import task capable of running as admin on behalf of user

Addressed by: https://review.opendev.org/738703
    Add a policy knob for allowing non-owned image copying

Addressed by: https://review.opendev.org/741312
    Remove unused "copy_from" policy rule

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.