kotovalexarian-likes-github
/
moby--moby
mirror of https://github.com/moby/moby.git
1
0
Fork 0
Code Releases Activity
moby--moby/docker
History
Liron Levin 75c353f0ad Docker authorization plug-in infrastructure enables extending the functionality of the Docker daemon with respect to user authorization. The infrastructure enables registering a set of external authorization plug-in. Each plug-in receives information about the user and the request and decides whether to allow or deny the request. Only in case all plug-ins allow accessing the resource the access is granted. 
Each plug-in operates as a separate service, and registers with Docker
through general (plug-ins API)
[https://blog.docker.com/2015/06/extending-docker-with-plugins/]. No
Docker daemon recompilation is required in order to add / remove an
authentication plug-in. Each plug-in is notified twice for each
operation: 1) before the operation is performed and, 2) before the
response is returned to the client. The plug-ins can modify the response
that is returned to the client.

The authorization depends on the authorization effort that takes place
in parallel [https://github.com/docker/docker/issues/13697].

This is the official issue of the authorization effort:
https://github.com/docker/docker/issues/14674

(Here)[https://github.com/rhatdan/docker-rbac] you can find an open
document that discusses a default RBAC plug-in for Docker.

Signed-off-by: Liron Levin <liron@twistlock.com>
Added container create flow test and extended the verification for ps
 		2015-12-08 17:34:15 +02:00
..
README.md
…
client.go cli: new daemon command and new cli package 2015-07-23 19:44:46 -04:00
common.go cli: new daemon command and new cli package 2015-07-23 19:44:46 -04:00
daemon.go Docker authorization plug-in infrastructure enables extending the functionality of the Docker daemon with respect to user authorization. The infrastructure enables registering a set of external authorization plug-in. Each plug-in receives information about the user and the request and decides whether to allow or deny the request. Only in case all plug-ins allow accessing the resource the access is granted. 2015-12-08 17:34:15 +02:00
daemon_freebsd.go Fix "./docker" package name on freebsd 2015-11-17 09:38:19 -08:00
daemon_linux.go Remove LXC support. 2015-11-05 17:09:57 -05:00
daemon_none.go Remove deprecated cli flags 2015-11-15 10:40:01 +01:00
daemon_unix.go fix golint warnings/errors on `pkg/system` and `pkg/stdcopy` 2015-08-13 18:47:13 +08:00
daemon_windows.go Separate API router from server. 2015-09-29 19:43:03 -04:00
docker.go Remove deprecated cli flags 2015-11-15 10:40:01 +01:00
docker_windows.go Windows: Build docker.exe manifested and with icon 2015-06-04 11:49:10 -07:00
flags.go Use consistent command description 2015-10-08 08:46:21 -04:00
flags_test.go Add test to check if subcommands are sorted 2015-08-07 01:34:21 -07:00

README.md

docker.go contains Docker's main function.

This file provides first line CLI argument parsing and environment variable setting.