Job set as "execute locally" should not require privilege to rundeck server node #1459

Closed
rophy opened this Issue Oct 1, 2015 · 3 comments

Projects

None yet

3 participants

@rophy
Contributor
rophy commented Oct 1, 2015

So I have a job as:

  • One single workflow step "Local Command" , per node or per workflow.
  • Node selection set to "Execute Locally"

If user does not have [read,run] privilege to rundeck_server, executing the job will fail with:

    No matched nodes: MultiNodeSelector{nodenames=[server_node]}

However, if I create as job as:

  • One single workflow step "Local Command" , per node or per workflow.
  • Node selection set to "Dispatch to Nodes"

Then, the job will success by selecting any random node, even though the job performs exactly the same thing: running a local command on rundeck server node.

(In both cases, user does not have access privilege to rundeck server)

@rophy
Contributor
rophy commented Oct 1, 2015

Workaround: instead of "Execute locally", define a 'stub' node, and configure the job to run on that node.

@gschueler gschueler added the bug label Oct 1, 2015
@gschueler gschueler added this to the 2.5.4 milestone Oct 1, 2015
@gschueler gschueler modified the milestone: 2.6.2, 2.6.3 Dec 1, 2015
@gschueler gschueler modified the milestone: 2.6.3, 2.6.4 Feb 25, 2016
@gschueler gschueler modified the milestone: 2.6.4, 2.6.5 Mar 4, 2016
@gschueler gschueler modified the milestone: 2.6.5, 2.6.6 Apr 15, 2016
@gschueler gschueler modified the milestone: 2.6.7, 2.6.x Apr 29, 2016
@JPGrieb
JPGrieb commented Jun 7, 2016

I'm getting this same error. What release will it be fixed in.

@gschueler gschueler modified the milestone: 2.6.8, 2.6.x Jun 7, 2016
@gschueler
Contributor

Local Command step plugin should require run access to the server node

@gschueler gschueler self-assigned this Jun 24, 2016
@gschueler gschueler closed this in 59de10c Jun 27, 2016
@gschueler gschueler removed the in progress label Jun 27, 2016
@variacode95 variacode95 pushed a commit to variacode95/rundeck that referenced this issue Jun 28, 2016
@gschueler gschueler + variacode95 fix #1459 require 'run' access to server node for Local Command plugin 49e1c91
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment