panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

修复 zot 本地维护身份的镜像删除权限 #144

Merged
panxiao81 merged 1 commits from fix/zot-maintainer-delete-20260925 into main 2026-09-25 14:53:59 +00:00
Conversation 0 Commits 1 Files Changed 1
+10 -4
panxiao81 commented 2026-09-25 14:52:49 +00:00
Owner
Copy Link
Copy Source

两个 runner 镜像仓库的精确授权覆盖了通配规则，导致本地维护身份无法删除旧 SHA tag。将 CI 与本地维护身份拆为独立 policy，仅后者增加 delete，CI 仍为 read/create/update。

用于维护者批准的旧镜像清理：保护最近两天、infra 引用及运行和回滚版本；不启用自动 retention。

验证：yamllint、嵌入 JSON 解析与权限断言、Helm chart 0.1.124 渲染、git diff --check 通过。

两个 runner 镜像仓库的精确授权覆盖了通配规则，导致本地维护身份无法删除旧 SHA tag。将 CI 与本地维护身份拆为独立 policy，仅后者增加 delete，CI 仍为 read/create/update。 用于维护者批准的旧镜像清理：保护最近两天、infra 引用及运行和回滚版本；不启用自动 retention。 验证：yamllint、嵌入 JSON 解析与权限断言、Helm chart 0.1.124 渲染、git diff --check 通过。
panxiao81 added 1 commit 2026-09-25 14:52:49 +00:00
修复 zot 本地维护身份在 CI 镜像仓库的删除权限
yaml / yaml (pull_request) Successful in 25s
Details
8dabbdce68
panxiao81 merged commit 185a47e2bb into main 2026-09-25 14:53:59 +00:00
panxiao81 deleted branch fix/zot-maintainer-delete-20260925 2026-09-25 14:53:59 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#144