Feature
Org-scoped access control
Org roles for people, a Machine role for automation, and unix-style ugo×rwx Mode bits on every governed resource.
Every governed resource belongs to one Organization. Each Org member holds one Org role: org:admin, org:contributor or org:viewer, highest first. Automation gets the ci:agent Machine role instead.
A Mode is a 9-bit value like unix permissions, granting read, write and delete to the Owner user, the Owner group and everyone else; the execute bit means delete. The default is 0o740.
The Mode ceiling stops any Mode from granting write or delete to everyone, and an Owner group must be one of the caller’s own Organizations. A Mode that is not an integer from 0 to 0o777 is refused.
More features
All features →- 01
Application lifecycle
Create, configure and delete Applications with Quotas per Cluster, Namespaces, Ownership links and Extended resources.
- 02
Pipelines and Pipeline runs
Record the CI/CD definition of each Application and every execution of it, with Commit statuses beside them.
- 03
Deployment tracking
Follow each Deployment of an Application on a Cluster, with service type, DNS, Stages and Events.