server

Documentation

Index

• Variables
• func BlobDispatcher(ctx *handlers.Context, r *http.Request) http.Handler
• func NewRegistryOpenShiftClient() (*osclient.Client, error)
• func NewUserOpenShiftClient(bearerToken string) (*osclient.Client, error)
• func UserClientFrom(ctx context.Context) (*client.Client, bool)
• func WithUserClient(parent context.Context, userClient *client.Client) context.Context
• type AccessController
  • func (ac *AccessController) Authorized(ctx context.Context, accessRecords ...registryauth.Access) (context.Context, error)

Variables

var (
	// Challenging errors
	ErrTokenRequired          = errors.New("authorization header with basic token required")
	ErrTokenInvalid           = errors.New("failed to decode basic token")
	ErrOpenShiftTokenRequired = errors.New("expected bearer token as password for basic token to registry")
	ErrOpenShiftAccessDenied  = errors.New("access denied")

	// Non-challenging errors
	ErrNamespaceRequired   = errors.New("repository namespace required")
	ErrUnsupportedAction   = errors.New("unsupported action")
	ErrUnsupportedResource = errors.New("unsupported resource")
)

Errors used and exported by this package.

Functions

func BlobDispatcher

func BlobDispatcher(ctx *handlers.Context, r *http.Request) http.Handler

BlobDispatcher takes the request context and builds the appropriate handler for handling blob requests.

func NewRegistryOpenShiftClient

func NewRegistryOpenShiftClient() (*osclient.Client, error)

func NewUserOpenShiftClient

func NewUserOpenShiftClient(bearerToken string) (*osclient.Client, error)

func UserClientFrom

func UserClientFrom(ctx context.Context) (*client.Client, bool)

func WithUserClient

func WithUserClient(parent context.Context, userClient *client.Client) context.Context

Types

type AccessController

type AccessController struct {
	// contains filtered or unexported fields
}

func (*AccessController) Authorized

func (ac *AccessController) Authorized(ctx context.Context, accessRecords ...registryauth.Access) (context.Context, error)

Authorized handles checking whether the given request is authorized for actions on resources allowed by openshift. Sources of access records:

origin/pkg/cmd/dockerregistry/dockerregistry.go#Execute
docker/distribution/registry/handlers/app.go#appendAccessRecords