pcuzner / ansible-runner-service

Python project that wraps the ansible_runner 'engine' inside a RESTful API
Other
17 stars 9 forks source link

Add an IP whitelist #39

Closed pcuzner closed 6 years ago

pcuzner commented 6 years ago

As a first pass at security,we should add an ip_whitelist 'list' to the configuration object (managed through /etc/ansible-runner-service/config.yaml

With the list in place the auth wrapper can simple compare the request.remote_addr to the whitelist (if set), and if it doesn't match return a http 401