[ClusterLabs] Coming in Pacemaker 2.1.3: CIB colorization for ACLs

Ken Gaillot kgaillot at redhat.com
Wed Mar 9 16:14:30 EST 2022


Hi all,

I'm hoping to have the first release candidate for Pacemaker 2.1.3
available towards the end of next month.

One of the new features will be a cibadmin option to show the CIB
colorized according to a particular user's ACLs. For example:

  cibadmin --query --user=tony --show-access=color | less -r

That will show the CIB XML with the parts that the "tony" user account
can't see in red, the parts that tony can only read in blue, and the
parts that tony can read and write in green.

The command must be run as root or a user with full CIB access, to be
able to show the parts of the CIB that the specified user can't see.

This feature was initially developed by Jan Pokorný and completed by
Grace Chin.
-- 
Ken Gaillot <kgaillot at redhat.com>



More information about the Users mailing list