Files
zira-etc/rundeck/system-job_runner.aclpolicy_template
2021-05-25 15:15:42 +03:00

35 lines
532 B
Plaintext

description: Allow groups to list projects
context:
application: 'rundeck'
for:
project:
- allow: read
match:
name: '.*'
by:
group: job_runner
---
description: Global run permissions to job_runner role
context:
project: '.*'
for:
resource:
- equals:
kind: 'node'
allow: [read,refresh]
job:
- allow: [read, run]
match:
name: '.*'
node:
- allow: [read, run, refresh]
match:
nodename: '.*'
resource:
- allow: read
equals:
kind: event
by:
group: job_runner