Allow app operator to deploy an app without admin rights via CLI

[ekevu123]

I would like to let the app operator role deploy the app they operate without admin rights via CLI or GUI (I believe I can't do this right now).
I think this would be logical, I want someone else to be the local admin for this particular app, but use my infrastructure.

In my case, I am working with someone who shouldn't be granted admin rights for the server, but I trust them enough to not screw up the app they are responsible for. This would allow me to delegate.

While we are on it, I'd also like them to use both the cloudron build server and push to the local docker repository via CLI.

[girish]

@ekevu123 when you say "the app", you mean your custom app correct?

The operator role is defined for an existing app and not for an app that will appear in the future.

It's not clear how this feature will look like. Can the other person deploy any app or just your custom app? How can Cloudron know what exactly your custom app is? What if they deploy their own custom app? (Guessing based on my understanding of the description).

[ekevu123]

The workflow would be:

• I deploy a custom app
• I make someone operator
• That person can optionally (if allowed) deploy by themselves, but only for the app they are operator for, not for a new app. So, someone else could update it.

[girish]

@ekevu123 so are you saying that cloudron update CLI does not work for operators? (that could very well be a CLI bug since it just assumes the person is an admin and makes lots of API calls without care)

[ekevu123]

Honestly, I didn't try. I didn't find evidence that this was possible, so I assumed it wasn't.
For my needs, I have found a different solution for this now, but maybe this could be helpful to clarify, if it works, then in the docs.