User publisher_acl setting in salt master config even if used client_acl in
pillar (backwards compatibility)
This commit is contained in:
		
							parent
							
								
									d3b46a3648
								
							
						
					
					
						commit
						f7189e2900
					
				| @ -351,7 +351,7 @@ publisher_acl: | ||||
| {%- endfor -%} | ||||
| {% elif 'client_acl' in cfg_master -%} | ||||
| {%- do default_keys.append('client_acl') %} | ||||
| client_acl: | ||||
| publisher_acl: | ||||
| {%- for name, user in cfg_master['client_acl']|dictsort %} | ||||
|   {{ name}}: | ||||
| {%- for command in user %} | ||||
| @ -359,7 +359,7 @@ client_acl: | ||||
| {%- endfor -%} | ||||
| {%- endfor -%} | ||||
| {% elif 'client_acl' in cfg_salt -%} | ||||
| client_acl: | ||||
| publisher_acl: | ||||
| {%- for name, user in cfg_salt['client_acl']|dictsort %} | ||||
|   {{ name }}: | ||||
| {%- for command in user %} | ||||
| @ -401,7 +401,7 @@ publisher_acl_blacklist: | ||||
|   {% endfor %} | ||||
| {% elif 'client_acl_blacklist' in cfg_master %} | ||||
| {%- do default_keys.append('client_acl_blacklist') %} | ||||
| client_acl_blacklist: | ||||
| publisher_acl_blacklist: | ||||
|   users: | ||||
|   {% for user in cfg_master['client_acl_blacklist'].get('users', []) %} | ||||
|     - {{ user }} | ||||
| @ -411,7 +411,7 @@ client_acl_blacklist: | ||||
|     - {{ mod }} | ||||
|   {% endfor %} | ||||
| {% elif 'client_acl_blacklist' in cfg_salt  %} | ||||
| client_acl_blacklist: | ||||
| publisher_acl_blacklist: | ||||
|   users: | ||||
|   {% for user in cfg_salt['client_acl_blacklist'].get('users', []) %} | ||||
|     - {{ user }} | ||||
| @ -421,7 +421,7 @@ client_acl_blacklist: | ||||
|     - {{ mod }} | ||||
|   {% endfor %} | ||||
| {% else %} | ||||
| #client_acl_blacklist: | ||||
| #publisher_acl_blacklist: | ||||
| #  users: | ||||
| #    - root | ||||
| #    - '^(?!sudo_).*$'   #  all non sudo users | ||||
| @ -429,7 +429,7 @@ client_acl_blacklist: | ||||
| #    - cmd | ||||
| {% endif %} | ||||
| 
 | ||||
| # Enforce client_acl & client_acl_blacklist when users have sudo | ||||
| # Enforce publisher_acl & publisher_acl_blacklist when users have sudo | ||||
| # access to the salt command. | ||||
| {{ get_config('sudo_acl', 'False') }} | ||||
| 
 | ||||
|  | ||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user
	 Vitali Quiering
						Vitali Quiering