#142 ✓resolved
Alex-SF

Define aclpolicy that confines node execution

Reported by Alex-SF | December 17th, 2010 @ 08:54 AM | in Rundeck 1.4 (closed)

Define a policy configuration that controls which Nodes a user can execute commands. This should include the same node filtering model used for controlling command dispatch.

Below is a hypothetical example using the nodefilters element used in job definitions:

<policies>
  <policy description="Node filtering policy">
    <context project="anvils">
      <command group="*" job="*" actions="resource_exec"/>
    </context>
    <nodefilters excludeprecedence="true">
      <include>
        <tags>web</tags>
      </include>
    </nodefilters>
    <by>
      <group name="webop"/>
    </by>
  </policy>
</policies>

Comments and changes to this ticket

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile »

(DEPRECATED) Please use github issues for issue tracking at http://github.com/dtolabs/rundeck/issues

Shared Ticket Bins

People watching this ticket

Pages