Skip to content

v2.4.0 — roles for network callers (HLD §18)

Choose a tag to compare

View all tags
@zw008 zw008 released this 16 Oct 07:25
· 12 commits to main since this release
v2.4.0
ce91db6
  • Declares the role metadata vmware-policy ≥ 1.24.0 needs to apply roles to this server over HTTPS
    (HLD §18): how a missing target resolves. With an older vmware-policy nothing changes. Once an operator runs
    vmware-audit roles enable, a token's role decides which tools and targets it may use here; a refused call is
    audited as denied. See vmware-policy's README, "Roles for network callers".
  • A target-limited role is checked against the same config the connection uses: the copy the server's connection manager loaded on its first connection. Edit config.yaml and restart for both to see the change.
  • README and setup guide: one endpoint for several people or roles.
Assets 2
Loading