Skip to main content

quay.io is pretty neat, but how do you know who has access to your repositories?

If you’ve got a small number of them, you can click through to each one and see who has what permissions. But if you’re an organization with a large number of repositories, it’s very hard to see who can access your repositories.

In particular, when someone leaves your organization, how can you be sure that they can no longer upload images?

quay-admin is a simple command-line tool that shows which users who are outside your organization have access to which repositories.

For example:

$ QUAY_TOKEN=<YOUR_TOKEN_HERE> quay-admin woofshop
woofshop/landscape
- niceperson [admin]

woofshop/spoonbridge
- cooldude [admin]

woofshop/thingdoer
- dodgybloke [admin]

Installing

$ pip install quayadmin

Running

Everything is under the quay-admin command, which has its own help.

usage: quay-admin [-h] [--from-state FROM_STATE] [--api-root API_ROOT]
                  [--dump-state DUMP_STATE]
                  namespace

Show information about quay.io permissions

positional arguments:
  namespace             Namespace to look in

optional arguments:
  -h, --help            show this help message and exit
  --from-state FROM_STATE
                        If provided, get quay.io state from a file, rather
                        than an API
  --api-root API_ROOT   Root of quay.io API. Ignored if --from-state provided.
  --dump-state DUMP_STATE
                        If provided, dump state to a file. Will overwrite file
                        if it exists.

To do anything useful, you will need an access token that has permission to “Administer Repositories”. See the quay.io API documentation for more information.

Running quay-admin will produce a text report of users who aren’t in your organization but who do have access to your repositories. If such users exist, the script will exit with code 1.

The normal state is to gather data from quay.io. However, you can save all that state with the --dump-state flag, and then load it later with --from--state. This can be useful for performing your own analysis, or developing new reporting functionality.

Metadata

Release files for quayadmin 0.1.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for quayadmin 0.1.2
File Size Uploaded
quayadmin-0.1.2.tar.gz 8.0 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for quayadmin 0.1.2
File Interpreter ABI Platform
quayadmin-0.1.2-py2.py3-none-any.whl Python 3, Python 2 none any Details

Total release size: 28.7 kB

Release files / quayadmin-0.1.2.tar.gz

Download URL quayadmin-0.1.2.tar.gz
Size 8.0 kB
Tags Source
SHA-256 checksum
How to use checksums
8c7b5f0e166c62136f828f0a966589515ffcf74a37654304e0cb38ad7d899b7c
BLAKE2b-256 checksum
How to use checksums
cffea1705ce9c8dcfabfd01576c6d046b51230ea9786bfd09526cca9149f2357
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No

Release files / quayadmin-0.1.2-py2.py3-none-any.whl

Download URL quayadmin-0.1.2-py2.py3-none-any.whl
Size 20.7 kB
Tags Python 2 Python 3
SHA-256 checksum
How to use checksums
60265438f7ca9ea2725a376c94713b2e4ad5962c6452792cb814226cc72d18ab
BLAKE2b-256 checksum
How to use checksums
122a5f541c31da1bc20481eada10a36ff65861f9398989684192a329f75db53d
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No

Release history Release notifications | RSS feed

This release

0.1.2 This release

2 release files

0.1.1

2 release files

0.1

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page