diff options
| author | Dan Fandrich <dan@coneharvesters.com> | 2023-12-16 16:36:05 -0800 |
|---|---|---|
| committer | Dan Fandrich <dan@coneharvesters.com> | 2023-12-20 00:54:05 -0800 |
| commit | b4fa54f1aeda82458a77a25c3b68ad9baa55c25e (patch) | |
| tree | 56840d0be488b1dfb1868cf3020a3c74cb2942e4 | |
| parent | a27358df41c5740e61f22c03ab77c347ffeb2a0a (diff) | |
| download | puppet-b4fa54f1aeda82458a77a25c3b68ad9baa55c25e.tar puppet-b4fa54f1aeda82458a77a25c3b68ad9baa55c25e.tar.gz puppet-b4fa54f1aeda82458a77a25c3b68ad9baa55c25e.tar.bz2 puppet-b4fa54f1aeda82458a77a25c3b68ad9baa55c25e.tar.xz puppet-b4fa54f1aeda82458a77a25c3b68ad9baa55c25e.zip | |
Allow members of mga-sysadmin to run sudo on all servers
This is try #2 after e0230ba1 was reverted. This time, the sudoers file
is given a name that will cause it to be sorted before any other rules,
allowing those other rules to override it. This is on the assumption
that the revert was needed because a NOPASSWD: rule wasn't taking effect
because this one (which requires a password) took precedence.
| -rw-r--r-- | deployment/common/manifests/init.pp | 1 | ||||
| -rw-r--r-- | deployment/common/manifests/sudo_sysadmin.pp | 7 | ||||
| -rw-r--r-- | deployment/common/templates/sudoers.sysadmin | 1 |
3 files changed, 9 insertions, 0 deletions
diff --git a/deployment/common/manifests/init.pp b/deployment/common/manifests/init.pp index 2a82cd1c..c7b7486d 100644 --- a/deployment/common/manifests/init.pp +++ b/deployment/common/manifests/init.pp @@ -8,6 +8,7 @@ class common { include common::export_ssh_keys include common::import_ssh_keys include common::i18n + include common::sudo_sysadmin include ntp include common::urpmi_update include puppet::client diff --git a/deployment/common/manifests/sudo_sysadmin.pp b/deployment/common/manifests/sudo_sysadmin.pp new file mode 100644 index 00000000..1247c02c --- /dev/null +++ b/deployment/common/manifests/sudo_sysadmin.pp @@ -0,0 +1,7 @@ +class common::sudo_sysadmin { + include sudo + + sudo::sudoers_config { '00-sysadmin': + content => template('common/sudoers.sysadmin') + } +} diff --git a/deployment/common/templates/sudoers.sysadmin b/deployment/common/templates/sudoers.sysadmin new file mode 100644 index 00000000..874b1858 --- /dev/null +++ b/deployment/common/templates/sudoers.sysadmin @@ -0,0 +1 @@ +%mga-sysadmin ALL=(ALL) ALL |