ACL policies for Rundeck, where the attribute name is the filename and the value is the policy content.
Declarations
Type
attribute set of stringDefault
{
"admin.aclpolicy" = ''
description: Admin, all access.
context:
project: '.*'
for:
resource:
- allow: '*'
adhoc:
- allow: '*'
job:
- allow: '*'
node:
- allow: '*'
runner:
- allow: '*'
by:
group: admin
---
description: Admin, all access.
context:
application: 'rundeck'
for:
resource:
- allow: '*'
project:
- allow: '*'
project_acl:
- allow: '*'
storage:
- allow: '*'
by:
group: admin
'';
}Example
{
"admin.aclpolicy" = ''
description: Admin access for administrators
context:
project: '.*'
for:
resource:
- allow: '*'
job:
- allow: '*'
node:
- allow: '*'
by:
group: admin
---
description: Admin access in application scope
context:
application: 'rundeck'
for:
resource:
- allow: '*'
project:
- allow: '*'
by:
group: admin
'';
}