Table: nomad_acl_binding_rule - Query Nomad ACL Binding Rules using SQL
Nomad ACL Binding Rule is a resource in HashiCorp's Nomad that allows users to map identities from an external trusted source to Nomad ACL Policies. It provides a way to define how trusted identities from an external source are granted Nomad ACL policies. Nomad ACL Binding Rule helps you manage access control lists by defining the mapping between the trusted identity attributes and Nomad ACL policies.
Table Usage Guide
The nomad_acl_binding_rule
table provides insights into ACL Binding Rules within Nomad. As a DevOps engineer or a security analyst, you can explore rule-specific details through this table, including the associated policies and identity sources. Utilize it to manage and monitor access control lists in your Nomad environment, ensuring secure and efficient operation.
Important Notes
- You need to specify the
secret_id
config argument in thenomad.spc
file to be able to query this table.
Examples
Basic info
Explore the different authorization methods and types used within your system, along with their creation details. This information can help you understand your access control list (ACL) binding rules, making it easier to manage user permissions and security.
select id, auth_method, bind_name, bind_type, create_time, create_indexfrom nomad_acl_binding_rule;
select id, auth_method, bind_name, bind_type, create_time, create_indexfrom nomad_acl_binding_rule;
List role type binding rules
Discover the specific binding rules that are associated with 'role' types. This can be particularly useful in managing access control lists (ACLs) within the Nomad system.
select id, auth_method, bind_name, bind_type, create_time, create_indexfrom nomad_acl_binding_rulewhere bind_type = 'role';
select id, auth_method, bind_name, bind_type, create_time, create_indexfrom nomad_acl_binding_rulewhere bind_type = 'role';
List binding rules created in the last 30 days
Discover the recently created binding rules in your Nomad ACL to stay updated on changes and modifications. This helps you maintain an oversight of your authorization methods, ensuring they are up-to-date and secure.
select id, auth_method, bind_name, bind_type, create_timefrom nomad_acl_binding_rulewhere create_time >= now() - interval '30' day;
select id, auth_method, bind_name, bind_type, create_timefrom nomad_acl_binding_rulewhere create_time >= datetime('now', '-30 days');
Show auth methods related to the binding rule
Explore the relationship between authentication methods and binding rules to better understand security protocols. This can help identify potential vulnerabilities or areas for improvement in your system's security.
select a.name as auth_method_name, a.type as auth_method_type, a.create_time as auth_method_creation_time, b.id as binding_rule_id, b.bind_type as bind_typefrom nomad_acl_binding_rule as b left join nomad_acl_auth_method as a on b.auth_method = a.name;
select a.name as auth_method_name, a.type as auth_method_type, a.create_time as auth_method_creation_time, b.id as binding_rule_id, b.bind_type as bind_typefrom nomad_acl_binding_rule as b left join nomad_acl_auth_method as a on b.auth_method = a.name;
Schema for nomad_acl_binding_rule
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
auth_method | text | The name of the auth method for which this rule applies. | |
bind_name | text | The binding name of the ACL binding rule. | |
bind_type | text | The binding type of the ACL binding rule. | |
create_index | bigint | Create index of the ACL binding rule. | |
create_time | timestamp with time zone | Create time of the ACL binding rule. | |
description | text | The description of the acl binding rule. | |
id | text | = | An internally generated UUID for this rule and is controlled by Nomad. |
modify_index | bigint | Modify index of the ACL binding rule. | |
modify_time | timestamp with time zone | Last modify time of the ACL binding rule. | |
selector | text | An expression that matches against verified identity attributes returned from the auth method during login. | |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
title | text | The title of the acl binding rule. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- nomad
You can pass the configuration to the command with the --config
argument:
steampipe_export_nomad --config '<your_config>' nomad_acl_binding_rule