Ci token allow list for entire group

GitLab CI/CD
1

add an entire group to the CI Token allow list

  • in the gitlab UI, under the project settings → CI/CD → Token Access
  • under Allow CI job tokens from the following projects to access this project
  • only other projects can be added to the list
  • it’d be nice if one could grant permission to all projects within a group
  • docker runners on a single EC2 instance
job:
  variables:
    PROJECT_ID: 1234
    NAME: mypackage
    FILE: mypackage.zip
  script:
    - |
      curl \
        -o "${FILE}" \
        --header "Job-Token: ${CI_JOB_TOKEN}" \
        ${CI_API_V4_URL}/projects/${PROJECT_ID}/packages/generic/${NAME}/${VERSION}/${FILE}