zuul/zuul-jobs
Code Issues Proposed changes

Merge "Add container repository cred permission checks"

Browse Source
This commit is contained in:
Zuul 2023-03-22 00:32:47 +00:00 committed by Gerrit Code Review
commit b017e4832c
2 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
roles/promote-container-image/tasks/main.yaml
View File

@ -8,6 +8,15 @@
fail:
msg: "{{ zj_image.registry }} credentials not found"
- name: Verify repository permission
when: |
not zj_image.repository | regex_search(container_registry_credentials[zj_image.registry].repository)
loop: "{{ container_images }}"
loop_control:
loop_var: zj_image
fail:
msg: "{{ zj_image.repository }} not permitted by {{ container_registry_credentials[zj_image.registry].repository }}"
- name: Log in to registry
no_log: true
command: >-

9
roles/upload-container-image/tasks/main.yaml
View File

@ -8,6 +8,15 @@
fail:
msg: "{{ zj_image.registry }} credentials not found"
- name: Verify repository permission
when: |
not zj_image.repository | regex_search(container_registry_credentials[zj_image.registry].repository)
loop: "{{ container_images }}"
loop_control:
loop_var: zj_image
fail:
msg: "{{ zj_image.repository }} not permitted by {{ container_registry_credentials[zj_image.registry].repository }}"
- name: Upload image to container registry
loop: "{{ container_images }}"
loop_control: