Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configuration for management role access #29

Merged

Conversation

guidograzioli
Copy link
Member

@guidograzioli guidograzioli commented Sep 9, 2022

New variables provide configuration for etc/management.xml:

Variable Description Default
activemq_management_access_default Management console access methods for roles activemq_hawtio_role [ 'list*', 'get*', 'is*', 'set*', 'browse*', 'count*', '*' ]
activemq_management_access_domains Management console access methods per domain for roles activemq_hawtio_role Access for java.lang, org.apache.artemis.activemq

The default generates:

      <default-access>
         <access method="list*" roles="{{ activemq_hawtio_role }}"/>
         <access method="get*" roles="{{ activemq_hawtio_role }}"/>
         <access method="is*" roles="{{ activemq_hawtio_role }}"/>
         <access method="set*" roles="{{ activemq_hawtio_role }}"/>
         <access method="*" roles="{{ activemq_hawtio_role }}"/>
      </default-access>
      <role-access>
         <match domain="org.apache.activemq.artemis">
            <access method="list*" roles="{{ activemq_hawtio_role }}"/>
            <access method="get*" roles="{{ activemq_hawtio_role }}"/>
            <access method="is*" roles="{{ activemq_hawtio_role }}"/>
            <access method="set*" roles="{{ activemq_hawtio_role }}"/>
            <access method="browse*" roles="{{ activemq_hawtio_role }}"/>
            <access method="count*" roles="{{ activemq_hawtio_role }}"/>
            <access method="*" roles="{{ activemq_hawtio_role }}"/>
         </match>
         <match domain="java.lang">
            <access method="list*" roles="{{ activemq_hawtio_role }}"/>
            <access method="get*" roles="{{ activemq_hawtio_role }}"/>
            <access method="is*" roles="{{ activemq_hawtio_role }}"/>
            <access method="set*" roles="{{ activemq_hawtio_role }}"/>
            <access method="*" roles="{{ activemq_hawtio_role }}"/>
         </match>

@guidograzioli guidograzioli changed the title Configure managment access via xpath instead of template Configuration for management role access Sep 9, 2022
@guidograzioli guidograzioli added the minor_changes New parameters added to modules, or non-breaking behavior changes to existing parameters; no bugfix label Sep 9, 2022
@guidograzioli guidograzioli merged commit 0da35de into ansible-middleware:main Sep 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
minor_changes New parameters added to modules, or non-breaking behavior changes to existing parameters; no bugfix
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant