1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
.TRY ACL
.INP: configure
.INP: _regtest on
.INP: erase
.INP: erase nodes
.INP: property stonith-enabled=false
.INP: node node1
.INP: property enable-acl=true
.INP: primitive d0 ocf:pacemaker:Dummy
.EXT crm_resource --show-metadata ocf:pacemaker:Dummy
.INP: primitive d1 ocf:pacemaker:Dummy
.INP: role basic-read read status read type:node attribute:uname read type:node attribute:type read property
.INP: role basic-read-basic read cib
.INP: role d0-admin write meta:d0:target-role write meta:d0:is-managed read ref:d0
.INP: role silly-role write meta:d0:target-role write meta:d0:is-managed read ref:d0 read status read type:node attribute:uname read type:node attribute:type read utilization:d0 read property:stonith-enabled write property read node read node:node1 read nodeattr read nodeattr:a1 read nodeutil read nodeutil:node1 read status read cib
.INP: role silly-role-two read xpath:"//nodes//attributes" deny tag:nvpair deny ref:d0
.INP: acl_target alice basic-read-basic
.INP: acl_target bob d0-admin basic-read-basic
.INP: role cyrus-role write meta:d0:target-role write meta:d0:is-managed read ref:d0 read status read type:node attribute:uname read type:node attribute:type read property
.INP: acl_target cyrus cyrus-role
.INP: _test
.INP: verify
.EXT crm_attribute --list-options=cluster --all --output-as=xml
.EXT crm_resource --list-options=primitive --all --output-as=xml
.INP: show
node node1
primitive d0 ocf:pacemaker:Dummy \
op monitor timeout=20s interval=10s \
op start timeout=20s interval=0s \
op stop timeout=20s interval=0s
primitive d1 ocf:pacemaker:Dummy \
op monitor timeout=20s interval=10s \
op start timeout=20s interval=0s \
op stop timeout=20s interval=0s
property cib-bootstrap-options: \
stonith-enabled=false \
enable-acl=true
role basic-read \
read status \
read attr:uname type:node \
read attr:type type:node \
read property
role basic-read-basic \
read cib
role cyrus-role \
write meta:d0:target-role \
write meta:d0:is-managed \
read ref:d0 \
read status \
read attr:uname type:node \
read attr:type type:node \
read property
role d0-admin \
write meta:d0:target-role \
write meta:d0:is-managed \
read ref:d0
role silly-role \
write meta:d0:target-role \
write meta:d0:is-managed \
read ref:d0 \
read status \
read attr:uname type:node \
read attr:type type:node \
read utilization:d0 \
read property:stonith-enabled \
write property \
read node \
read node:node1 \
read nodeattr \
read nodeattr:a1 \
read nodeutil \
read nodeutil:node1 \
read status \
read cib
role silly-role-two \
read xpath:"//nodes//attributes" \
deny type:nvpair \
deny ref:d0
acl_target alice \
basic-read-basic
acl_target bob \
d0-admin \
basic-read-basic
acl_target cyrus \
cyrus-role
.INP: commit
|
