Currently, peer publishing allows a set of minions to have a certain set of rights on all minions. It would be ideal if we could constrain the rights to a specific set of minions as well, like this (or something like it):
peer:
i-000002.pmtpa.wmflabs:
- .*:
minions: i-000000.pmtpa.wmflabs, i-000001.pmtpa.wmflabs
I know that the enforcement occurs on the master, and clients can use grains and such to specify targets, but if the configuration for the peer was sent out with the command, the minions could determine whether or not they would pick up the job, based on if the peer was allowed to run the command on the minion.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4