Skip to main content

resolve_container_api_access

zlayer_agent::auth

Function resolve_container_api_access 

Source 
pub fn resolve_container_api_access<S: BuildHasher>(
    deployment: &str,
    labels: &HashMap<String, String, S>,
) -> ContainerApiAccess
Expand description

Resolve a container’s API-access policy from its deployment name and service labels. Default: read + container:*:write + image:*:write on its own deployment (so the default per-container Docker socket can drive build/run/push), DEFAULT_CONTAINER_TOKEN_TTL_SECS TTL, no admin socket. Labels override each knob.