Robot account with permissions to pull across all and push project specific about harbor HOT 5 OPEN

you can do it through the robot creation UI, check the pull permission for each project and the push permission of “my-project-name”.

Like:

from harbor.

thanks @wy65701436 for the reply, I understand its achievable using the way you describe, however, trying to do it using the terraform provider (example in the documentation), as it'll be cumbersome with having multiple harbor deployments and projects with a robot account per project.
If this is more related to terraform-provider-harbor happy to raise this as a bug there.

from harbor.

@wy65701436
I re-open this ticket as I think it's not an issue with the provider but with the UI as with the API you can create a robot account with "Cover all project" rights AND specific projects rights :

[
  {
    "creation_time": "2024-04-15T14:32:14.849Z",
    "description": "System level Robot account for Project",
    "disable": false,
    "duration": -1,
    "editable": true,
    "expires_at": -1,
    "id": 1,
    "level": "system",
    "name": "robot$ci",
    "permissions": [
      {
        "access": [
          {
            "action": "pull",
            "effect": "allow",
            "resource": "repository"
          }
        ],
        "kind": "project",
        "namespace": "*"
      },
      {
        "access": [
          {
            "action": "pull",
            "effect": "allow",
            "resource": "repository"
          },
          {
            "action": "push",
            "effect": "allow",
            "resource": "repository"
          }
        ],
        "kind": "project",
        "namespace": "library"
      }
    ],
    "update_time": "2024-04-15T14:33:03.769Z"
  }
]

from harbor.

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

from harbor.

commenting to keep it active.
cc: @flbla

from harbor.