{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/9887","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/9887/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/9887/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/9887/events","html_url":"https://github.com/openshift/origin/pull/9887","id":165879191,"number":9887,"title":"Allow anonymous registry access","user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2016-07-15T21:16:40Z","updated_at":"2016-07-16T03:55:22Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/9887","html_url":"https://github.com/openshift/origin/pull/9887","diff_url":"https://github.com/openshift/origin/pull/9887.diff","patch_url":"https://github.com/openshift/origin/pull/9887.patch"},"body":"Policy updates:\r\n* Adds an `self-access-reviewer` role (name up for grabs)\r\n* Grants that role to all users (authenticated and unauthenticated) by default\r\n\r\nDocker registry updates:\r\n* Allows registry auth to recognize bearer tokens in addition to basic auth\r\n* Responds to a missing Authorization header with a Bearer challenge, directing to a token handling endpoint\r\n* Adds a token handling endpoint:\r\n  * Grants a token to anonymous token requests\r\n  * Validates a basic auth password sent to a token request as an API token, then echoes it as the granted token\r\n\r\nTODO:\r\n- [ ] positive and negative tests for anonymous users running self SARs\r\n  - [ ] ensure no namespace existence info is leaked\r\n- [ ] positive and negative tests for anonymous and authenticated registry use"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/233106414","html_url":"https://github.com/openshift/origin/pull/9887#issuecomment-233106414","issue_url":"https://api.github.com/repos/openshift/origin/issues/9887","id":233106414,"user":{"login":"openshift-bot","id":1779249,"avatar_url":"https://avatars.githubusercontent.com/u/1779249?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift-bot","html_url":"https://github.com/openshift-bot","followers_url":"https://api.github.com/users/openshift-bot/followers","following_url":"https://api.github.com/users/openshift-bot/following{/other_user}","gists_url":"https://api.github.com/users/openshift-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift-bot/subscriptions","organizations_url":"https://api.github.com/users/openshift-bot/orgs","repos_url":"https://api.github.com/users/openshift-bot/repos","events_url":"https://api.github.com/users/openshift-bot/events{/privacy}","received_events_url":"https://api.github.com/users/openshift-bot/received_events","type":"User","site_admin":false},"created_at":"2016-07-16T03:55:22Z","updated_at":"2016-07-16T03:55:22Z","body":"Evaluated for origin test up to e9b8ec13bf4325068bba9971d5df3fdd4e14918e"}}
{"actor":{"display_login":"openshift-bot"}}