Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-17367

Exclude patterns not working when accessing artifactory via docker client

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Resolution: Unresolved
    • Affects Version/s: 6.2.0, 7.4.1
    • Fix Version/s: None
    • Component/s: None
    • Labels:
    • Severity:
      Critical

      Description

      We are using Artifactory as docker registry. 
      Our docker registry look like this: 
      docker-local
          /nts
              /myimage
                  >15.00.00
                  >latest

      Some user groups shall not have access to 'latest' docker images, so we add an exclude pattern to the corresponding permission target: '**/latest'

      With this exclude pattern the latest-image disappears from artifactory UI
      BUT with 'docker pull <artifactory-url>/nts/myimage:latest' the image can still be downloaded!

      When I change the exclude pattern from '*/latest' to '/latest/' we can't download the image with 'docker pull' as expected BUT we can access the myimage:latest from within the artifactory-UI

      To permit access to the latest-image from UI and docker client we use 2 exclude patterns as workaround: '*/latest' and '/latest/'

      In earlier version of artifactory, the exclude rule '**/latest' excluded the latest-images from I and docker client as expected!

        Attachments

          Issue Links

            Activity

                People

                Assignee:
                Unassigned
                Reporter:
                ronald.angerer Ronald Angerer
                Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                  Dates

                  Created:
                  Updated: