Skip to content

Instantly share code, notes, and snippets.

@IssacTran

IssacTran/aclpolicy-template.yaml

Forked from gschueler/aclpolicy-template.yaml
Created June 28, 2016 03:18
Download ZIP

Revisions

  1. @gschueler gschueler created this gist Sep 24, 2013.
    42 changes: 42 additions & 0 deletions aclpolicy-template.yaml
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,42 @@
    description: Project scope for group
    context:
    project: '.*'
    for:
    job:
    - equals:
    group: 'example'
    name: 'Restart'
    allow: [run,read]
    - equals:
    group: 'example'
    name: 'stop'
    allow: [run,read]
    - equals:
    group: 'example'
    name: 'start'
    allow: [run,read]
    adhoc:
    - allow: [run,read]
    node:
    - contains:
    tags: 'example'
    allow: [run,read]
    by:
    group: [group_name]

    ---

    description: Limited user access for group.
    context:
    application: 'rundeck'
    for:
    resource:
    - equals:
    kind: system
    allow: [read] # allow read of system info
    project:
    - match:
    name: '.*'
    allow: [read] # allow view of all projects
    by:
    group: [group_name]