{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/6569","labels_url":"https://api.github.com/repos/openshift/origin/issues/6569/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/6569/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/6569/events","html_url":"https://github.com/openshift/origin/issues/6569","id":125399376,"number":6569,"title":"image-puller can pull images, but he has no way to know the name","user":{"login":"deads2k","id":8225098,"avatar_url":"https://avatars.githubusercontent.com/u/8225098?v=3","gravatar_id":"","url":"https://api.github.com/users/deads2k","html_url":"https://github.com/deads2k","followers_url":"https://api.github.com/users/deads2k/followers","following_url":"https://api.github.com/users/deads2k/following{/other_user}","gists_url":"https://api.github.com/users/deads2k/gists{/gist_id}","starred_url":"https://api.github.com/users/deads2k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deads2k/subscriptions","organizations_url":"https://api.github.com/users/deads2k/orgs","repos_url":"https://api.github.com/users/deads2k/repos","events_url":"https://api.github.com/users/deads2k/events{/privacy}","received_events_url":"https://api.github.com/users/deads2k/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openshift/origin/labels/area/security","name":"area/security","color":"006b75"},{"url":"https://api.github.com/repos/openshift/origin/labels/area/usability","name":"area/usability","color":"006b75"},{"url":"https://api.github.com/repos/openshift/origin/labels/component/imageregistry","name":"component/imageregistry","color":"0052cc"},{"url":"https://api.github.com/repos/openshift/origin/labels/priority/P2","name":"priority/P2","color":"fbca04"}],"state":"open","locked":false,"assignee":{"login":"deads2k","id":8225098,"avatar_url":"https://avatars.githubusercontent.com/u/8225098?v=3","gravatar_id":"","url":"https://api.github.com/users/deads2k","html_url":"https://github.com/deads2k","followers_url":"https://api.github.com/users/deads2k/followers","following_url":"https://api.github.com/users/deads2k/following{/other_user}","gists_url":"https://api.github.com/users/deads2k/gists{/gist_id}","starred_url":"https://api.github.com/users/deads2k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deads2k/subscriptions","organizations_url":"https://api.github.com/users/deads2k/orgs","repos_url":"https://api.github.com/users/deads2k/repos","events_url":"https://api.github.com/users/deads2k/events{/privacy}","received_events_url":"https://api.github.com/users/deads2k/received_events","type":"User","site_admin":false},"milestone":null,"comments":3,"created_at":"2016-01-07T14:01:33Z","updated_at":"2016-01-07T14:05:55Z","closed_at":null,"body":"We created the `system:image-puller` role to allow service accounts to pull images, but for that usage there was no reason to grant them the power to list all the available images.\r\n\r\nWhen we attempt to use that role for humans, its presents a problem.  They can pull whatever image they want, but they have no power to actually list the images available to them.  I think its probably reasonable to expand the role to grant them the power to see the images themselves.\r\n\r\n@liggitt @pweil- @ncdc @sub-mod"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/169673617","html_url":"https://github.com/openshift/origin/issues/6569#issuecomment-169673617","issue_url":"https://api.github.com/repos/openshift/origin/issues/6569","id":169673617,"user":{"login":"ncdc","id":354,"avatar_url":"https://avatars.githubusercontent.com/u/354?v=3","gravatar_id":"","url":"https://api.github.com/users/ncdc","html_url":"https://github.com/ncdc","followers_url":"https://api.github.com/users/ncdc/followers","following_url":"https://api.github.com/users/ncdc/following{/other_user}","gists_url":"https://api.github.com/users/ncdc/gists{/gist_id}","starred_url":"https://api.github.com/users/ncdc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ncdc/subscriptions","organizations_url":"https://api.github.com/users/ncdc/orgs","repos_url":"https://api.github.com/users/ncdc/repos","events_url":"https://api.github.com/users/ncdc/events{/privacy}","received_events_url":"https://api.github.com/users/ncdc/received_events","type":"User","site_admin":false},"created_at":"2016-01-07T14:05:55Z","updated_at":"2016-01-07T14:05:55Z","body":"No objection to doing something like that, I just don't want to open up 'list images' as there will be hundreds/thousands/etc of images in the system, and there's no way to filter them unless you go through image streams."}}