From b39b9af978179899c8a3f034b0a585970ab4db0c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Nicolas=20Mass=C3=A9?= Date: Thu, 4 Jun 2026 16:39:34 +0000 Subject: [PATCH] doc --- cookbooks/quay/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbooks/quay/README.md b/cookbooks/quay/README.md index 7cc78fc..2a3308c 100644 --- a/cookbooks/quay/README.md +++ b/cookbooks/quay/README.md @@ -112,7 +112,7 @@ And use the following command to login and store credentials in `~/.config/conta REGISTRY_AUTH_FILE=~/.config/containers/auth.json podman login -u quayadmin -p 'ChangeMe!' https://quay.example.test ``` -> ![warning] +> [!WARNING] > If you enable persistent storage for the credentials, it is safer to generate a read-only robot account in Quay for pulling images from the mirror, and restrict the scope of the credentials to just the mirror repository. This way, if the credentials are leaked, the damage is limited. And if you need to access other parts of the registry read-write, you can login with a regular user account. > > ```