Setup:

Environments: prod and non-prod
Agents: prod and non-prod, attached to the respective environment

I have defined a role with the following rights:

allow view * *
allow administer environment non-prod


When I check my environment from the engineer role I see the following:

Pipelines: Perfect, I can't move production pipelines to non-prod 
environment and vice versa.
Agents: Not so perfect, I have administer rights on the non-prod 
environment so I am able to move production agents to the non prod 
environment through agent association and use those in my non-prod setup.

How can I setup a hard split between agents so I can only deploy with a 
specific set? It seems that using environments is not the correct way. 

-- 
You received this message because you are subscribed to the Google Groups 
"go-cd" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/go-cd/7efbccc4-f905-408d-94c0-53dcdcb2894ao%40googlegroups.com.

Reply via email to