From e0230ba1c5819f15245b930df0949b7ddabce4a0 Mon Sep 17 00:00:00 2001
From: Dan Fandrich <dan@coneharvesters.com>
Date: Fri, 19 Feb 2016 00:34:41 +0100
Subject: Allow members of mga-sysadmin to run sudo on all servers

---
 deployment/common/manifests/init.pp          | 1 +
 deployment/common/manifests/sudo_sysadmin.pp | 7 +++++++
 deployment/common/templates/sudoers.sysadmin | 1 +
 3 files changed, 9 insertions(+)
 create mode 100644 deployment/common/manifests/sudo_sysadmin.pp
 create mode 100644 deployment/common/templates/sudoers.sysadmin

diff --git a/deployment/common/manifests/init.pp b/deployment/common/manifests/init.pp
index 2a82cd1c..c7b7486d 100644
--- a/deployment/common/manifests/init.pp
+++ b/deployment/common/manifests/init.pp
@@ -8,6 +8,7 @@ class common {
         include common::export_ssh_keys
         include common::import_ssh_keys
         include common::i18n
+        include common::sudo_sysadmin
         include ntp
         include common::urpmi_update
         include puppet::client
diff --git a/deployment/common/manifests/sudo_sysadmin.pp b/deployment/common/manifests/sudo_sysadmin.pp
new file mode 100644
index 00000000..bbcd1c97
--- /dev/null
+++ b/deployment/common/manifests/sudo_sysadmin.pp
@@ -0,0 +1,7 @@
+class common::sudo_sysadmin {
+    include sudo
+
+    sudo::sudoers_config { 'sysadmin':
+        content => template('common/sudoers.sysadmin')
+    }
+}
diff --git a/deployment/common/templates/sudoers.sysadmin b/deployment/common/templates/sudoers.sysadmin
new file mode 100644
index 00000000..874b1858
--- /dev/null
+++ b/deployment/common/templates/sudoers.sysadmin
@@ -0,0 +1 @@
+%mga-sysadmin        ALL=(ALL) ALL
-- 
cgit v1.2.1