alpacon token acl

Configure fine-grained access control for API tokens. Three independent ACL types enforce deny-by-default access:

Type	Controls	Applied when
`command`	Which shell commands can be executed	`alpacon exec` and non-interactive `alpacon websh`
`server`	Which servers can be accessed	Any websh, exec, or cp operation targeting that server
`file`	Which file paths can be read/written	`alpacon cp`

If no ACL rule exists for a given type, that access is denied entirely.

Note: Command ACLs apply to alpacon exec and non-interactive alpacon websh SERVER "command". Interactive alpacon websh SERVER sessions are not restricted by command ACLs.

alpacon token acl [flags]
alpacon token acl [command]

Options

  -h, --help   help for acl

acl command

Manage command ACL rules (websh/exec)

acl server

Manage server ACL rules

acl file

Manage file ACL rules (cp)