pub fn default_scopes_for(deployment: &str) -> Vec<TokenScope>Expand description
Default scopes for a container. Every container gets a per-container Docker
Engine API socket by default, and docker needs to create containers and
pull/build/push images, so grant container:*:write + image:*:write (the
kinds the Docker-compat endpoints authorize against) in addition to the
read-only own-deployment default. A deployment can replace these wholesale
via LABEL_API_SCOPES.