We are running two different self-managed Gitlab CE instances.
One of them contains a repository ci-images
with a container registry containing images that are supposed to be used in CI Pipelines across various projects on both instances. Since those images do not contain any sensitive data, I would like them to be available to all projects on both instances without having to use dedicated access tokens.
I can achieve this within the first instance by adding all my groups to the CI/CD job token allowlist
in the CI/CD settings of ci-images
. But this does not work across instances. For all projects on the second one, I have to manually create a deploy token in my registry-project and configure it in the project wanting to access the image.
Is there some way to allow all runners from a different instance automatically without having to resort to deploy tokens or project tokens?