teknofire/ldap-admin-policy.json

Last active May 13, 2019 22:06

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/teknofire/3a92ab7a6f882adf8202532ba7a7a8cb.js"></script>
Save teknofire/3a92ab7a6f882adf8202532ba7a7a8cb to your computer and use it in GitHub Desktop.

Download ZIP

Raw

ldap-admin-policy.json

	{
	"action": "*",
	"resource": "*",
	"subjects": [
	"team:ldap:ldap-admins-group"
	]
	}

Author

teknofire commented May 13, 2019 •

edited

Loading

Save the above file as admin-policy.json
Then modify the ldap-admins-group to match the name of the ldap group the user belongs to
Apply it to automate using the following commands

export TOK=`chef-automate admin-token`
curl -k -H "api-token: $TOK" -H "Content-Type: application/json" -d@admin-policy.json https://localhost/api/v0/auth/policies

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment