🚀建议通过管理员页面为集群配置一个镜像仓库的全局账户，为集群部署应用提供凭据，用于镜像权限管理收缩

[alex-ohhh]

功能描述

目前如果是团队研发，在平台部署应用时，需要为每位研发配置一个私有仓库账户，因此引发的更多的安全需求，需要控制各团队成员能够访问的镜像，建议由管理员配置一个全局镜像凭据，来收缩拉取镜像的权限

使用场景

由于需要对镜像仓库进行安全和权限管理，需要对拉取镜像的权限进行收缩，建议由管理员来配置提供全局镜像仓库凭据，由团队成员仅使用即可

实现方案（可选）

No response

是否愿意提交 PR 实现该功能

• 我愿意提交 PR 实现该功能

[Issues-translate-bot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

Title: 🚀 It is recommended to configure a global account for the mirror warehouse for the cluster through the administrator page, to provide credentials for cluster deployment applications, and for mirror permission management shrinkage

Function description

Currently, if it is a team R&D, when deploying applications on the platform, each R&D needs to be configured with a private warehouse account, which leads to more security requirements and the need to control the images that each team member can access. It is recommended that the administrator configure a global image credential to shrink the permissions to pull images.

Usage scenarios

Due to the need for security and permission management of the image repository, the permissions for pulling images need to be reduced. It is recommended that the administrator configure and provide global image repository credentials, which can only be used by team members.

Implementation plan (optional)

No response

Are you willing to submit a PR to implement this feature?

• I am willing to submit a PR to implement this function

[zzzhangqi]

@alex-ohhh 目前 Rainbond 只是在工作空间内对接镜像仓库，不会直接管镜像仓库的权限，你希望的全局配置是指有一个全局能配置镜像仓库的地方，默认应用到所有团队？

[Issues-translate-bot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

@alex-ohhh Currently, Rainbond only connects to the image warehouse in the workspace and does not directly manage the permissions of the image warehouse. The global configuration you want means that there is a place where the image warehouse can be configured globally, and it is applied to all teams by default?

[alex-ohhh]

@zzzhangqi 是这样，这样既可以通过创建机器人镜像仓库账户来避免为所有人创建账户，也可以有效管理镜像的安全和权限，在自动化构建流程中自动构建镜像，团队成员不用参与管理镜像。

[Issues-translate-bot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

@zzzhangqi That’s right. In this way, you can avoid creating accounts for everyone by creating a robot image warehouse account, and you can also effectively manage the security and permissions of the image, automatically build the image in the automated build process, and team members do not need to participate in managing the image.