Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Secure option values cannot be used in scripts/commands

#551
  • Issue Type: Improvement
  • Rundeck version: 1.4.2

Issue:

Secure option values can only be used for SSH/sudo authentication, and cannot be used in scripts/commands.

A use case is to allow user to enter a password securely (not stored in DB), but use the value in a script, such as a DB admin password to load SQL data.

Proposal:

Add ability to have secure options that "expose" the values in scripts. Defining Job Options can select between three types of input: plain, "secure", and "secure authentication". The "secure" type will expose the value in a script, while "secure authentication" will not.

XML/Yaml job definitions will have a new attribute for options called "valueExposed=true/false".

An option definition can then specify secure="true" to indicate a "secure authentication" option. If valueExposed="true" as well, then the value will be available in scripts/commands.

example in XML:

     <option name='dbPassword' valueExposed='true' secure='true'>
          <description>secure DB Password entry</description>
     </option>

example in YAML:

options:
    dbPassword:
      description: secure DB Password entry
      secure: true
      valueExposed: true

Reported by Greg Schueler · March 27th, 2012 @ 10:58 AM

State: resolved
Milestone: Rundeck 1.4.3
Assigned to: Greg Schueler Greg Schueler

Activity

  1. Greg Schueler
    Greg Schueler
    • State changed from new to needs_verification

    April 10th, 2012 @ 12:18 PM

  2. Greg Schueler
    Greg Schueler
    • State changed from needs_verification to resolved
    • Milestone order changed from 31 to 0

    June 19th, 2012 @ 07:32 PM

  3. Greg Schueler
  4. Greg Schueler
  5. Greg Schueler
  6. Greg Schueler
  7. Greg Schueler
  8. Greg Schueler

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.