Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

taskotron dev: only allow authorized users to make changes in web ui

Browse source
This commit is contained in:
Kamil Páral 2019-02-07 16:28:58 +01:00
parent bfde2ab3ea
commit a45db16529
1 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
roles/taskotron/buildmaster-configure/templates/taskotron.master.cfg.j2.dev
View file

@ -423,6 +423,22 @@ c['www'] = {
"{{ local_buildbot_user }}": "{{ local_buildbot_password }}",
{% endif %}
}),
'authz': util.Authz(
allowRules=[
util.AnyControlEndpointMatcher(role="admins"),
],
roleMatchers=[
{% if deployment_type == 'dev' %}
util.RolesFromUsername(roles=['admins'], usernames=["{{ dev_buildbot_user }}"]),
{% elif deployment_type == 'stg' %}
util.RolesFromUsername(roles=['admins'], usernames=["{{ stg_buildbot_user }}"]),
{% elif deployment_type == 'prod' %}
util.RolesFromUsername(roles=['admins'], usernames=["{{ prod_buildbot_user }}"]),
{% elif deployment_type == 'local' %}
util.RolesFromUsername(roles=['admins'], usernames=["{{ local_buildbot_user }}"]),
{% endif %}
]
),
}