From 72c1399f99309fe443fd1261418293fff3de5bac Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Fri, 9 Jan 2026 23:43:44 +0900
Subject: [PATCH] FEAT(zot): enable anonymous read access for UI

- Add accessControl with anonymousPolicy for read operations
- Keep authentication required for push (create/update/delete)
- Fixes UI login redirect loop issue
---
 zot/helm-values.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/zot/helm-values.yaml b/zot/helm-values.yaml
index e6b1db6..99fd76b 100644
--- a/zot/helm-values.yaml
+++ b/zot/helm-values.yaml
@@ -117,6 +117,15 @@ configMaps:
               "htpasswd": {
                 "path": "/etc/zot/htpasswd"
               }
+            },
+            "accessControl": {
+              "**": {
+                "anonymousPolicy": ["read"],
+                "policies": [{
+                  "users": ["admin"],
+                  "actions": ["read", "create", "update", "delete"]
+                }]
+              }
             }
           },
           "log": {