上QQ阅读APP看书,第一时间看更新
RBAC for Rundeck
Rundeck also provides RBAC as Ansible Tower. Unlike Tower, here we have to configure using the YAML configuration file in /etc/rundeck/.
The following code snippet is an example of creating an admin user policy:
description: Admin, all access.
context:
application: 'rundeck'
for:
resource:
- allow: '*' # allow create of projects
project:
- allow: '*' # allow view/admin of all projects
project_acl:
- allow: '*' # allow all project-level ACL policies
storage:
- allow: '*' # allow read/create/update/delete for all /keys/* storage content
by: group: admin
For more information about creating different policies, visit http://rundeck.org/docs/administration/access-control-policy.html.