Once upon a time, the company I work for decided to migrate all Docker images from a hosted registry to a self-hosted one. The main requirement, in line with the Principle of Least Privilege, was to restrict service accounts to access only their designated images. This ensures that every project could only access its own images. Continue reading →