42 lines
1.1 KiB
JSON
42 lines
1.1 KiB
JSON
|
{
|
||
|
|
"test_id": "SSH-G2",
|
||
|
|
"policy_file": "ssh_policies/ssh_g2.json",
|
||
|
|
"ssh_section": [
|
||
|
|
{
|
||
|
|
"action": "accept",
|
||
|
|
"src": ["autogroup:member"],
|
||
|
|
"dst": ["tag:server"],
|
||
|
|
"users": ["root"],
|
||
|
|
"acceptEnv": ["GIT_*", "CUSTOM_VAR_?"]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"nodes": {
|
||
|
|
"user1": { "rules": [] },
|
||
|
|
"user-kris": { "rules": [] },
|
||
|
|
"user-mon": { "rules": [] },
|
||
|
|
"tagged-server": {
|
||
|
|
"rules": [
|
||
|
|
{
|
||
|
|
"principals": [
|
||
|
|
{ "nodeIP": "100.103.90.82" },
|
||
|
|
{ "nodeIP": "100.110.121.96" },
|
||
|
|
{ "nodeIP": "100.90.199.68" },
|
||
|
|
{ "nodeIP": "fd7a:115c:a1e0::1737:7960" },
|
||
|
|
{ "nodeIP": "fd7a:115c:a1e0::2d01:c747" },
|
||
|
|
{ "nodeIP": "fd7a:115c:a1e0::9e37:5a52" }
|
||
|
|
],
|
||
|
|
"sshUsers": { "root": "root" },
|
||
|
|
"action": {
|
||
|
|
"accept": true,
|
||
|
|
"allowAgentForwarding": true,
|
||
|
|
"allowLocalPortForwarding": true,
|
||
|
|
"allowRemotePortForwarding": true
|
||
|
|
},
|
||
|
|
"acceptEnv": ["GIT_*", "CUSTOM_VAR_?"]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"tagged-prod": { "rules": [] }
|
||
|
|
}
|
||
|
|
}
|