Rundeck ACL to allow access to the "Upgrade" folder

upgrade_acl.yaml

description: System-level read access
context:
  application: rundeck
for:
  project:
    - allow: '.*' # allow view/admin of all projects
  system:
    - match:
      name: '.*'
    allow: [read,write,run,kill]
by:
  group: upgrade
  
---

description: upgrade access to domain management
context:
  project: '.*'
for:
  resource:
    - equals:
        kind: node
      allow: [read,refresh] 
    - equals:
        kind: event
      allow: [read,create]
    - equals:
        kind: job
      allow: [read]
  job:
    - equals:
        group: 'Upgrade/.*'
      allow: [read,run,runAs,kill,killAs,view,view_history]
    - match:
        group: 'Upgrade/.*'
      allow: [read,run,runAs,kill,killAs,view,view_history]
  node:
    - match:
        nodename: '*'
      allow: [read,run]
by:
  group: upgrade