OCI Registry Policies - Push Image
Summary
Correct policies for allowing developers to only pull and push images to the OCI Container RegistryContent
Hi Everyone,
I am trying to set up the correct policies for the OCI Container Registry that allows a developer to pull and push images. In the list of common policies, there is an example for a group of "pushers" to do that, but also create a repository if it doesn't already exists. I would like the policy to strictly allow the developer to only push and not create any repositories. The target repositories will be created by an administrator.
The following two policy statements are what is suggested:
1