How to allow push for authenticated user, but pull for anonymous/everybody?

[Kubernetes]

Hi there,

How to allow push for authenticated user, but pull for anonymous/everybody?

I would like to have a public available image pull repository of Docker Images.
Pushing new Docker images or updating Docker images should only possible for authenticated users.

Does somebody know how to achieve this?

Thanks!

Mike

PS: This is first part of implementing the idea in this post

[fbartels]

I don't think this is easily doable with the default registry app on Cloudron. But it can still be achieved with other apps available on Cloudron.

I would use the Gitea app as a base. You can tie this app to the Cloudron auth and allow container uploads for a certain user. Within the repo of choice you can then do a public pull. The added benefit is that you can use Gitea actions to build apps in the first place.

[Kubernetes]

@fbartels That sounds like a very good suggestion. Thank you, I will give it a try

[girish]

yeah, as @fbartels said, the app is hosted behind a proxy auth. The whole thing is either protected or not. It's not possible to have public pulls with private pushes.