HomePhorge

(#5966) Add support for hostname regular expressions in auth.conf
c02126df4804Unpublished

Unpublished Commit · Learn More

Repository Importing: This repository is still importing.

Description

(#5966) Add support for hostname regular expressions in auth.conf

When hosting multiple applications (especially with different security levels),
you may not want to allow every client to read all the files required for
every other client. Currently it is possible to do this when your host and
domain names reasonably reflect that grouping, ex: hostXYZ.someapp.domain.com.

However, if you have a more flat naming convention, it is difficult to write
these ACLs. This patch adds support for matching hostnames with regular
expressions, thus extending the ACLs to allow:

path /file_content/secrets/appserver
allow /appserver[0-9]+.example.com$/

path /file_content/secrets/otherservice
allow /^(test-)crazy[0-9]+.pattern.(com|net)$/

Signed-off-by: Josh Cooper <josh@puppetlabs.com>
Reviewed-by: Jacob Helwig <jacob@puppetlabs.com>

Details

Provenance
Siim Põder <siim.poder@skype.net>Authored on
Josh Cooper <josh@puppetlabs.com>Committed on May 31 2011, 6:12 PM
vanmeeuwenPushed on Jun 2 2015, 2:22 PM
Parents
rPUd0592fabd274: Merge branch 'ticket/2.7.x/maint-faces_docs_spec_fixes' into 2.7.x
Branches
Unknown
Tags
Unknown

Event Timeline

Josh Cooper <josh@puppetlabs.com> committed rPUc02126df4804: (#5966) Add support for hostname regular expressions in auth.conf (authored by Siim Põder <siim.poder@skype.net>).May 31 2011, 6:12 PM