description: 'Acess for dev in guitars-production.'
context:
project: 'guitars-production'
for:
resource:
- allow: read
job:
- equals:
group: 'web'
name: 'Status'
allow: [run,read]
- equals:
group: 'web'
name: 'Restart'
allow: [read]
node:
- contains:
tags: www
allow: [read,run]
by:
group: dev
---
description: 'Acess for dev in guitars-stage.'
context:
project: 'guitars-stage'
for:
resource:
- allow: read
job:
- match:
group: 'web'
name: '.*'
allow: [run,read]
adhoc:
- allow: [read,run,kill]
node:
- match:
nodename: 'db.*'
allow: [read]
- contains:
tags: app
allow: [read,run]
- contains:
tags: www
allow: [read,run]
by:
group: dev
---
description: 'Allow read access for projects.'
context:
application: 'rundeck'
for:
resource:
- allow: [read]
project:
- allow: [read]
by:
group: dev