2

I want to use one server to host multiple docker-containers. I want to give another user a possibility to manage new docker-containers, but I do not want to give him access to all other containers, which I started, since they may contain sensitive data.

Is there a way to create a secure configuration which doesn't require creating virtual machine?

Improve this question

1 Answer 1

Reset to default
1

Hi and welcome to DevOps SE!

To enable Role-Based Access Control (RBAC) for Docker Engine, you need the UCP (Universal Control Pane) available through Docker EE.

https://success.docker.com/article/rbac-example-overview

A free alternative could be also the Kubernetes module rbac.authorization.k8s.io.

Side note: To control docker commands available to a user, use AuthZPlugin for the Docker engine (there are open source implementations of this API).

Improve this answer
3
  • I've read the documentation, but I am still not sure, how this can be done. Would you be able to add some example to your answer?
    – noisy
    Commented Sep 13, 2018 at 8:03
  • it looks like, with both solutions I can only restrict a users access to particular commands. But what I need, is to give full access to some container and none access to others
    – noisy
    Commented Sep 13, 2018 at 8:11
  • yeah...at first glance, this is what I need. But pricing of docker EE...is not acceptable for me :(
    – noisy
    Commented Sep 13, 2018 at 8:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.