add IAM_GROUPS_CREATE cap to registry push caps (#98)

Signed-off-by: Colin Douglas <[email protected]>
chainguard-dev · Jan 26, 2024 · d5efea2 · d5efea2
1 parent fd6b544
commit d5efea2
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/proto/capabilities/roles.go b/proto/capabilities/roles.go
@@ -122,6 +122,9 @@ var (
 		Capability_CAP_TAG_CREATE,
 		Capability_CAP_TAG_UPDATE,
 		Capability_CAP_TAG_DELETE,
+
+		// To create nested groups as needed on push.
+		Capability_CAP_IAM_GROUPS_CREATE,
 	}, RegistryPullCaps...))
 
 	RegistryPullTokenCreatorCaps = sortCaps(append([]Capability{