Grant users permission to pull images

By default, only administrators can pull images into a cluster managed by MKE. This topic describes how to give non-administrator users permission to pull images.

Images are always in the swarm collection, as they are a shared resource. Grant users the Image Create permission for the Swarm collection to allow them to pull images.

To grant a user permission to pull images:

1. Log in to the MKE web UI as an administrator.

2. Navigate to Access Control > Roles.

3. Select the Swarm tab and click Create.

4. On the Details tab, enter Pull images for the role name.

5. On the Operations tab, select Image Create from the IMAGE OPERATIONS drop-down.

6. Click Create.

7. Navigate to Access Control > Grants.

8. Select the Swarm tab and click Create Grant.

9. Under Subject, click Users and select the required user from the drop-down.

10. Click Next.

11. Under Resource Set, select the Swarm collection and click Next.

12. Under Role, select Pull images from the drop-down.

13. Click Create.