Skip to main content

Questions tagged [permissions]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer

Key Vault managed stored account encryption permissions denied

Trying to amend an existing storage account to add Customer-Managed-Key Rotation to it, using key vault, as per the docs from Terraform and MS. Looks like we've done everything right, but we're just ...
Stuart.Sklinar's user avatar
0 votes
1 answer

Create a folder in slave node using Jenkins pipeline groovy script

I have a Jenkins job which runs on a slave node on another machine, both master and slave run on windows. The slave node is being run as a windows service. The main repository has git submodule ...
Sreehari's user avatar
0 votes
0 answers

Docker mount volume on SELinux enabled server

I'm trying to run Nginx as the docker container on SELinux enabled server with mounted configuration as -v /host/path/nginx.conf:/etc/nginx/nginx.conf:Z That works fine till I will deploy updated ...
JackTheKnife's user avatar
3 votes
1 answer

What are the best practices for sharing production Postgres access with developers?

We're a small SaaS startup (~10 person team; mostly engineers). We use Postgres on AWS and GCP in production. We have signed contracts with some customers that prohibit us from giving full production ...
RainSear's user avatar
  • 131
4 votes
2 answers

Docker mounts files as uid 1001

I have a Docker image that runs a PHP application. Everything works fine on my machine and the ones of my colleagues. However, some colleagues got a new computer that runs on Ubuntu 20.04 and by ...
Boris's user avatar
  • 43
0 votes
2 answers

Dockerized node.js and bind mount permission problem

I have an interesting problem with node, docker-compose and local development using bind mounts. I have a bind mount volume, called www-public, owned by my host node user (I created a node user and ...
U2ros's user avatar
  • 103
2 votes
1 answer

Is there a way to tell if an Azure Devops Extension is secure to use?

How do I know that an Azure Devops Extension does not do anything really bad? A company that I know of uses Microsoft's Azure Devops platform to manage its software development. Microsoft also ...
Audun Knudsroed's user avatar
0 votes
1 answer

Add permissions to readers (DevOps Web Portal)

I have a public Azure DevOps project, and I want to allow everyone to add Work Items. However, adding the Readers group as a member of Contributors for the permissions doesn't change anything, and I ...
iyenal's user avatar
  • 1
14 votes
1 answer

Permission denied within mounted volume inside Podman container

I am starting to learn about containers using podman that came with RHEL8.1 (which AFAIK can be used in place of docker), and have the following baby Dockerfile as a learning exercise: # Use Alpine ...
hpy's user avatar
  • 451
3 votes
1 answer

kubernetes: how to set "top node" and "top pod" permissions?

Hoping for some pointers, I have a question: what role/permissions do I need to bind to a user that has ClusterRole=view in order to let that user use top node and top pod commands in kubectl? My ...
Ludo's user avatar
  • 61
1 vote
1 answer

Assign Directory Read/Write Privileges to Azure Service Principal from the command line?

I am trying to provision a user in Azure Active Directory using Terraform's AzureAD provider. At the top of the azuread_user documentation, it states: NOTE: If you're authenticating using a ...
Richard Slater's user avatar
3 votes
1 answer

Provide customers with access to Azure Container Registry

I'm using Azure Container Registry for private Docker images. I want to let around 500 customers pull images and use the Docker V2 HTTP API to read metadata. Service Principals are one way to go ...
Cocowalla's user avatar
  • 153
1 vote
2 answers

See which Roles contain a GCLOUD Permisson

I'd like to see wich Roles in iam yield a certain permission. In other words, for a given permission (like billing.accounts.updateUsageExportSpec) I want to know a list of Roles, that satisfy this ...
Nils Martel's user avatar
0 votes
2 answers

What is the most common server permission policy for web application deployment?

I have a server with Ubuntu with a web server (Apache or Nginx) running a PHP application. The application consists of the following parts: An executable code that handles HTTP requests (say in the /...
Finesse's user avatar
  • 101
0 votes
1 answer

how to give a user privilege to run Ansible commands or just an specific tag?

for example, I have a tag named 'installagent' and i want to run this command ansible -playbook -i /path agent.yml --tags installagent from another server via ssh on my Ansible server with user '...
BlackCrystal's user avatar
9 votes
5 answers

How do you limit access to the production environment in the company you work for?

In the company I work for, devops engineers (currently only 2 members, who are me and another coworker) are the only people who have access to the production database. So when any other developers ...
Brian's user avatar
  • 193
31 votes
2 answers

How to change the owner of VOLUME directory in Dockerfile?

I've got the following Dockerfile: FROM ubuntu:xenial RUN useradd -d /home/ubuntu -ms /bin/bash -g root -G sudo -p ubuntu ubuntu WORKDIR /home/ubuntu USER ubuntu VOLUME /opt/myvolume Which I built ...
kenorb's user avatar
  • 7,901
2 votes
1 answer

Permission errors with non-root USER when running on Linux

I have been getting some unexpected failures with the execution of my Docker images when running on my Ubuntu 16.04.3 LTS machine. I'm using Docker version 18.02.0-ce (edge), installed from apt. I've ...
Jake Feasel's user avatar
2 votes
1 answer

Using docker with users leaves files belonging to the subuid/subgid

Background I wish to make sure all people and automated processes working with my project use the exact same version and environment of some tool which has to do work on the host file system. ...
AnoE's user avatar
  • 4,886
2 votes
1 answer

Ansible tmp files created with odd permissions

I have an ansible playbook which can be simplified to this: - name: Provision server hosts: all_hosts become: yes ...
fildred13's user avatar
  • 313
12 votes
1 answer

How to restrict filesystem access in Atlassian Bamboo builds?

We have Atlassian Bamboo running on Ubuntu. When a developer is setting up a build, then he or she has the possibility to run shell script tasks. This is useful to run (custom) commands on the ...
7ochem's user avatar
  • 984
2 votes
1 answer

What are the different job permissions possible in Jenkins, and what are the reasons you would use each?

I'd like to understand better job permissions in Jenkins. What type of user permissions can I setup in Jenkins? And when would you use each?
kenorb's user avatar
  • 7,901