diff --git a/demos/role-strategy-auth/README.md b/demos/role-strategy-auth/README.md index cc873d39..e5365cf1 100644 --- a/demos/role-strategy-auth/README.md +++ b/demos/role-strategy-auth/README.md @@ -1,7 +1,7 @@ # role-strategy-plugin -https://plugins.jenkins.io/role-strategy + -## sample +## sample -TODO \ No newline at end of file +Check out the example yaml file [role-strategy-auth.yaml] which is taken from the plugins' integration test resources \ No newline at end of file diff --git a/demos/role-strategy-auth/role-strategy-auth.yaml b/demos/role-strategy-auth/role-strategy-auth.yaml new file mode 100644 index 00000000..3b1965d1 --- /dev/null +++ b/demos/role-strategy-auth/role-strategy-auth.yaml @@ -0,0 +1,67 @@ +jenkins: + [..] + authorizationStrategy: + roleBased: + roles: + global: + - name: "admin" + description: "Jenkins administrators" + permissions: + - "Overall/Administer" + assignments: + - "admin" + - name: "readonly" + description: "Read-only users" + permissions: + - "Overall/Read" + - "Job/Read" + assignments: + - "authenticated" + items: + - name: "FolderA" + description: "Jobs in Folder A, but not the folder itself" + pattern: "A/.*" + permissions: + - "Job/Configure" + - "Job/Build" + - "Job/Delete" + assignments: + - "user1" + - "user2" + - name: "FolderB" + description: "Jobs in Folder B, but not the folder itself" + pattern: "B.*" + permissions: + - "Job/Configure" + - "Job/Build" + assignments: + - "user2" + agents: + - name: "Agent1" + description: "Agent 1" + pattern: "agent1" + permissions: + - "Agent/Build" + assignments: + - "user1" + + securityRealm: + local: + allowsSignup: false + users: + - id: "admin" + password: "1234" + - id: "user1" + password: "" + + nodes: + - dumb: + mode: NORMAL + name: "agent1" + remoteFS: "/home/user1" + launcher: jnlp + - dumb: + mode: NORMAL + name: "agent2" + remoteFS: "/home/user1" + launcher: jnlp \ No newline at end of file