docker/api в 75c353f0ad73bd83ed18e92857dd99a103bb47e3 - docker - Git

История

Liron Levin 75c353f0ad Docker authorization plug-in infrastructure enables extending the functionality of the Docker daemon with respect to user authorization. The infrastructure enables registering a set of external authorization plug-in. Each plug-in receives information about the user and the request and decides whether to allow or deny the request. Only in case all plug-ins allow accessing the resource the access is granted. Each plug-in operates as a separate service, and registers with Docker through general (plug-ins API) [https://blog.docker.com/2015/06/extending-docker-with-plugins/]. No Docker daemon recompilation is required in order to add / remove an authentication plug-in. Each plug-in is notified twice for each operation: 1) before the operation is performed and, 2) before the response is returned to the client. The plug-ins can modify the response that is returned to the client. The authorization depends on the authorization effort that takes place in parallel [https://github.com/docker/docker/issues/13697]. This is the official issue of the authorization effort: https://github.com/docker/docker/issues/14674 (Here)[https://github.com/rhatdan/docker-rbac] you can find an open document that discusses a default RBAC plug-in for Docker. Signed-off-by: Liron Levin <liron@twistlock.com> Added container create flow test and extended the verification for ps		2015-12-08 17:34:15 +02:00
..
client	Merge pull request #18123 from aidanhs/aphs-fail-on-broken-tar	2015-12-07 14:38:21 +01:00
fixtures	…
server	Docker authorization plug-in infrastructure enables extending the functionality of the Docker daemon with respect to user authorization. The infrastructure enables registering a set of external authorization plug-in. Each plug-in receives information about the user and the request and decides whether to allow or deny the request. Only in case all plug-ins allow accessing the resource the access is granted.	2015-12-08 17:34:15 +02:00
types	move configs structs to remove dependency on daemon	2015-12-07 09:03:25 -08:00
README.md	…
common.go	Change sorting method and add test to DisplayablePorts	2015-10-19 10:38:54 -05:00
common_test.go	Change sorting method and add test to DisplayablePorts	2015-10-19 10:38:54 -05:00

README.md

This directory contains code pertaining to the Docker API:

Used by the docker client when communicating with the docker daemon
Used by third party tools wishing to interface with the docker daemon