Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Configure Jenkins project matrix-based security

Browse source
This commit is contained in:
Mikolaj Izdebski 2015-07-22 10:58:54 +00:00
parent ddc01967b9
commit e994dc25e0
1 changed files with 33 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

35
roles/jenkins/master/files/config.xml
View file

@ -5,7 +5,38 @@
<numExecutors>2</numExecutors> <numExecutors>2</numExecutors>
<mode>NORMAL</mode> <mode>NORMAL</mode>
<useSecurity>true</useSecurity> <useSecurity>true</useSecurity>
<authorizationStrategy class="hudson.security.FullControlOnceLoggedInAuthorizationStrategy"/> <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy">
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.Create:mizdebsk</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.Delete:mizdebsk</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:mizdebsk</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.Update:mizdebsk</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.View:mizdebsk</permission>
<permission>hudson.model.Computer.Build:mizdebsk</permission>
<permission>hudson.model.Computer.Configure:mizdebsk</permission>
<permission>hudson.model.Computer.Connect:mizdebsk</permission>
<permission>hudson.model.Computer.Create:mizdebsk</permission>
<permission>hudson.model.Computer.Delete:mizdebsk</permission>
<permission>hudson.model.Computer.Disconnect:mizdebsk</permission>
<permission>hudson.model.Hudson.Administer:mizdebsk</permission>
<permission>hudson.model.Hudson.ConfigureUpdateCenter:mizdebsk</permission>
<permission>hudson.model.Hudson.Read:mizdebsk</permission>
<permission>hudson.model.Hudson.RunScripts:mizdebsk</permission>
<permission>hudson.model.Hudson.UploadPlugins:mizdebsk</permission>
<permission>hudson.model.Item.Build:mizdebsk</permission>
<permission>hudson.model.Item.Cancel:mizdebsk</permission>
<permission>hudson.model.Item.Configure:mizdebsk</permission>
<permission>hudson.model.Item.Create:mizdebsk</permission>
<permission>hudson.model.Item.Delete:mizdebsk</permission>
<permission>hudson.model.Item.Discover:mizdebsk</permission>
<permission>hudson.model.Item.Read:mizdebsk</permission>
<permission>hudson.model.Item.Workspace:mizdebsk</permission>
<permission>hudson.model.Run.Delete:mizdebsk</permission>
<permission>hudson.model.Run.Update:mizdebsk</permission>
<permission>hudson.model.View.Configure:mizdebsk</permission>
<permission>hudson.model.View.Create:mizdebsk</permission>
<permission>hudson.model.View.Delete:mizdebsk</permission>
<permission>hudson.model.View.Read:mizdebsk</permission>
</authorizationStrategy>
<securityRealm class="hudson.plugins.openid.OpenIdSsoSecurityRealm" plugin="openid@2.1.1"> <securityRealm class="hudson.plugins.openid.OpenIdSsoSecurityRealm" plugin="openid@2.1.1">
<endpoint>http://id.fedoraproject.org/</endpoint> <endpoint>http://id.fedoraproject.org/</endpoint>
</securityRealm> </securityRealm>
@ -33,4 +64,4 @@
<label></label> <label></label>
<nodeProperties/> <nodeProperties/>
<globalNodeProperties/> <globalNodeProperties/>
</hudson> </hudson>