Skip to content

feat(admin): add ACR credentials endpoint (#1110)#1112

Open
Issac-Newton wants to merge 1 commit into
alibaba:masterfrom
Issac-Newton:feature/acr-credentials
Open

feat(admin): add ACR credentials endpoint (#1110)#1112
Issac-Newton wants to merge 1 commit into
alibaba:masterfrom
Issac-Newton:feature/acr-credentials

Conversation

@Issac-Newton

Copy link
Copy Markdown
Collaborator

Summary

  • Add AcrConfig dataclass with instance_id, region, access_key_id, access_key_secret
  • Add GET /acr/credentials endpoint returning temporary username/password (1 hour TTL) via ACR GetAuthorizationToken API
  • Add aliyun-python-sdk-cr dependency
  • Add acr section in rock-local.yml

fixes #1110

Test plan

  • Unit tests added (TestGetAcrCredentials — success, failure, no client)
  • Manual test: successfully pushed images using temp credentials
  • uv run ruff check passes
  • uv run pytest tests/unit/sandbox/test_sandbox_proxy.py passes

@Issac-Newton Issac-Newton force-pushed the feature/acr-credentials branch from 187d5a1 to 1e0eaae Compare June 16, 2026 09:53
Move ACR credentials from sandbox proxy router to a dedicated image
router at POST /apis/envs/image/v1/generate_registry_credentials.
Rename get_acr_credentials to generate_acr_credentials to better
reflect the temporary token generation semantics.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@Issac-Newton Issac-Newton force-pushed the feature/acr-credentials branch from 1e0eaae to 96db0a1 Compare June 16, 2026 10:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: add GET /acr/credentials endpoint with temporary token support

1 participant