{"action":"opened","issue":{"url":"https://api.github.com/repos/chef/knife-acl/issues/32","repository_url":"https://api.github.com/repos/chef/knife-acl","labels_url":"https://api.github.com/repos/chef/knife-acl/issues/32/labels{/name}","comments_url":"https://api.github.com/repos/chef/knife-acl/issues/32/comments","events_url":"https://api.github.com/repos/chef/knife-acl/issues/32/events","html_url":"https://github.com/chef/knife-acl/issues/32","id":132488753,"number":32,"title":"Need a way to manage acl state","user":{"login":"spuder","id":242382,"avatar_url":"https://avatars.githubusercontent.com/u/242382?v=3","gravatar_id":"","url":"https://api.github.com/users/spuder","html_url":"https://github.com/spuder","followers_url":"https://api.github.com/users/spuder/followers","following_url":"https://api.github.com/users/spuder/following{/other_user}","gists_url":"https://api.github.com/users/spuder/gists{/gist_id}","starred_url":"https://api.github.com/users/spuder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spuder/subscriptions","organizations_url":"https://api.github.com/users/spuder/orgs","repos_url":"https://api.github.com/users/spuder/repos","events_url":"https://api.github.com/users/spuder/events{/privacy}","received_events_url":"https://api.github.com/users/spuder/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-02-09T18:01:27Z","updated_at":"2016-02-09T18:01:27Z","closed_at":null,"body":"knife-acl is great. There really needs to be a way to manage the desired state of the ACL's.\r\n\r\n# Problem\r\nNo way to put ACL's in version control. \r\nIf you loose chef server, you loose acls unless you wrote them down\r\n\r\n# Solutions\r\n\r\nUse a state provider (like terraform) to let users put ACL's in a config file. \r\nAllow for way to export ACL's from the chef server\r\nCreate a cookbook that manages the acl state. \r\n\r\nPersonally I like option 1. I've created a [feature request](https://github.com/hashicorp/terraform/issues/4682) in terraform. \r\n\r\n"}}