Authenticating User Accounts with JWT about harbor HOT 2 OPEN

Have you got a chance to try robot account?

from harbor.

Have you got a chance to try robot account?

We did get a chance to look at robot accounts. The issues we found were:

• Rotating robot accounts requires resetting the password and updating the expiring time
  • This causes the original secret to become invalid, which would break our need to have zero downtime rotations
  • We could create a "new" robot account so they both exist, but then we need to make sure we replicate the permissions from the original robot account
• In our use case, there is no connectivity from the system our users get their credentials from and the registry. This means we couldn't trigger a way to pull the credentials from harbor.
• Managing the "state" of robot accounts could be more involved than managing just the user accounts, as in our case we would need N robot accounts per actual user versus just 1 to 1 account per user.

from harbor.