Security Automation with Ansible 2
上QQ阅读APP看书,第一时间看更新

RBAC for Rundeck

Rundeck also provides RBAC as Ansible Tower. Unlike Tower, here we have to configure using the YAML configuration file in /etc/rundeck/.

The following code snippet is an example of creating an admin user policy:

description: Admin, all access.
context:
application: 'rundeck'
for:
resource:
- allow: '*' # allow create of projects
project:
- allow: '*' # allow view/admin of all projects
project_acl:
- allow: '*' # allow all project-level ACL policies
storage:
- allow: '*' # allow read/create/update/delete for all /keys/* storage content
by: group: admin

For more information about creating different policies, visit http://rundeck.org/docs/administration/access-control-policy.html.