75c353f0ad
Each plug-in operates as a separate service, and registers with Docker through general (plug-ins API) [https://blog.docker.com/2015/06/extending-docker-with-plugins/]. No Docker daemon recompilation is required in order to add / remove an authentication plug-in. Each plug-in is notified twice for each operation: 1) before the operation is performed and, 2) before the response is returned to the client. The plug-ins can modify the response that is returned to the client. The authorization depends on the authorization effort that takes place in parallel [https://github.com/docker/docker/issues/13697]. This is the official issue of the authorization effort: https://github.com/docker/docker/issues/14674 (Here)[https://github.com/rhatdan/docker-rbac] you can find an open document that discusses a default RBAC plug-in for Docker. Signed-off-by: Liron Levin <liron@twistlock.com> Added container create flow test and extended the verification for ps |
||
|---|---|---|
| .. | ||
| client.go | ||
| common.go | ||
| daemon.go | ||
| daemon_freebsd.go | ||
| daemon_linux.go | ||
| daemon_none.go | ||
| daemon_unix.go | ||
| daemon_windows.go | ||
| docker.go | ||
| docker_windows.go | ||
| flags.go | ||
| flags_test.go | ||
| README.md | ||
docker.go contains Docker's main function.
This file provides first line CLI argument parsing and environment variable setting.