docker
[Docker Hub] Enable read access to every repo in organization
Tell us about your request Allow all members of an organization to have read access to all repos.
Which service(s) is this request for? Docker Hub
Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard? When new repositories are added to an organization, the repo permissions must be updated in order to grant teams access to the new repo. Hub users have expressed a desire to automatically allow all members of an organization to automatically have read access to a repo (e.g. a policy that provides everyone in a team with read-only access to all repos).
Are you currently working around the issue? See above (repo permissions must be updated in order to grant individual teams with access to a new repo).
Additional context NA
Concur with this request. Individual access controls is powerful but cumbersome to administer for organizations with many repositories. Most of the time having a Team with Read-Only for all repos is good enough granularity.
This is important for kubernetes to pull image with read-only role for all repos
Is there any update on this issue? We have many repositories and it's burdensome to manage permissions for each individually.
It'd also be helpful to be able to give a non-owner team write access to every repository in an organization. We may want a team to be able to push to any repository (and create new repositories), without also giving them control over billing, or adding/removing new members.
It is an impossible task to manage repo's individually for a large organization. And we just bought a business license and enabled SSO...
What would be great is to be able to set global repo permissions at the organization level.
- Team X has READ on all repos.
- Team Y has READ/WRITE on all repos.
- Team devops has READ/WRITE/ADMIN on all repos.
Then at the team level restrict access to specific repos. E.g. Team Y has no WRITE access on repo Z.
Lacking this feature has made Team and Business account less attractive compared to the same service from other competitor.
This is direly needed for our organization. We have hundreds of repositories and provision user access automatically via Okta, but still have to manage repository permissions manually. There at least needs be an API endpoint that can update repository permissions so people can script it.
Just wanted to follow up and say we have actually dropped our business license for docker hub. This was certainly one of the reasons we never fully leveraged Docker Hub. And was therefor a contributing factor we have moved on.
this is possible now with OAT to create a token with read-only permission for all organization repos https://docs.docker.com/enterprise/security/access-tokens/
