本文共 1955 字,大约阅读时间需要 6 分钟。
rundeck创建普通apitoken
** realm.properties 配置文件加** apiforhades: MD5:xxxxxx,user,api_token_group**etc 权限文件添加****vim apiforhades.aclpolicy**description: Admin, all access.context: project: '.*' # all projectsfor: resource: - equals: kind: job allow: [read,run,kill] # allow read/create all kinds - equals: kind: node allow: [run] - equals: kind: event allow: [read] adhoc: - deny: '*' job: - allow: [read,run] # allow read/write/delete/run/kill of all jobs node: - allow: '*' # allow read/run for all nodesby: username: apiforhades ---description: Admin, all access.context: application: 'rundeck'for: resource: - allow: '*' # allow create of projects project: - allow: [read,configure] # allow view/admin of all projects storage: - allow: 'read' # allow read/create/update/delete for all /keys/* storage contentby: username: apiforhades** vim apitoken.aclpolicy **description: API project level access controlcontext: project: '.*' # all projectsfor: resource: - equals: kind: job allow: [read] # allow create and delete jobs - equals: kind: node allow: [run] # allow refresh node sources - equals: kind: event allow: [read] # allow read/create events adhoc: - deny: '*' # allow running/killing adhoc jobs and read output job: - allow: [read] # allow create/read/write/delete/run/kill of all jobs node: - allow: [run] # allow read/run for all nodesby: group: api_token_group---description: API Application level access controlcontext: application: 'rundeck'for: resource: - equals: kind: system allow: [read] # allow read of system info project: - match: name: '.*' allow: [read] # allow view of all projects storage: - match: path: '(keys|keys/.*)' allow: '*' # allow all access to manage stored keysby: group: api_token_group
转载于:https://blog.51cto.com/sry2004/2059953