TernixTernix
Config (…)

services.rundeck.aclPolicies

NixOS option

attribute set of string

ACL policies for Rundeck, where the attribute name is the filename and the value is the policy content

type: attribute set of string
Default
{
  "admin.aclpolicy" = ''
    description: Admin, all access.
    context:
      project: '.*'
    for:
      resource:
        - allow: '*'
      adhoc:
        - allow: '*'
      job:
        - allow: '*'
      node:
        - allow: '*'
      runner:
        - allow: '*'
    by:
      group: admin
    
    ---
    
    description: Admin, all access.
    context:
      application: 'rundeck'
    for:
      resource:
        - allow: '*'
      project:
        - allow: '*'
      project_acl:
        - allow: '*'
      storage:
        - allow: '*'
    by:
      group: admin
  '';
}
Example
{
  "admin.aclpolicy" = ''
    description: Admin access for administrators
    context:
      project: '.*'
    for:
      resource:
        - allow: '*'
      job:
        - allow: '*'
      node:
        - allow: '*'
    by:
      group: admin
    ---
    description: Admin access in application scope
    context:
      application: 'rundeck'
    for:
      resource:
        - allow: '*'
      project:
        - allow: '*'
    by:
      group: admin
  '';
}
declared in: nixos/modules/services/web-apps/rundeck.nixView source on NixOS/nixpkgs →