init.sls

# State
include:
  - users.sudo

{% for name, user in pillar.get('users', {}).items() %}
{% set home = user.get('home', "/home/%s" % name) %}

{% for group in user.get('groups', []) %}
{{ group }}_group:
  group:
    - name: {{ group }}
    - present
{% endfor %}

{{ name }}_user:
  file.directory:
    - name: {{ home }}
  user.present:
    - name: {{ name }}
    - home: {{ home }}
    - shell: {{ pillar.get('unprivileged_shell', '/bin/bash') }}
    - uid: {{ user['uid'] }}
    - gid_from_name: True
    {% if 'fullname' in user %}
    - fullname: {{ user['fullname'] }}
    {% endif %}
    {% if user.get('groups', [])|length > 0 %}
    - groups:
      {% for group in user.get('groups', []) %}
        - {{ group }}
      {% endfor %}
    - require:
        - file: {{ name }}_user
      {% for group in user.get('groups', []) %}
        - group: {{ group }}
      {% endfor %}
    {% endif %}
  {% if 'ssh_auth' in user %}
  ssh_auth:
    - present
    - user: {{ name }}
    - name: {{ user['ssh_auth'] }}
    - require:
        - file: {{ name }}_user
        - user: {{ name }}_user
  {% endif %}

{% if 'sudouser' in user %}
sudoer-{{ name }}:
    file.append:
        - name: /etc/sudoers
        - text:
          - "{{ name }}    ALL=(ALL)  NOPASSWD: ALL"
        - require:
          - file: sudoer-defaults

{% endif %}

{% endfor %}

{% for user in pillar.get('absent_users', []) %}
{{ user }}:
  user.absent
{% endfor %}

sudo.sls

# Sudo
sudo:
  group:
    - present
    - system: True
  pkg:
    - installed
    - require:
      - group: sudo
      - file: /etc/sudoers.d

/etc/sudoers.d:
  file:
    - directory
    - clean: True

sudoer-defaults:
    file.append:
        - name: /etc/sudoers
        - require:
          - pkg: sudo
        - text:
          - Defaults    !secure_path

users.sls

## Pillar users.sls
users:
  www-data:
    uid: 1011
    groups:
      - www-data
  auser:
    uid: 1018
    sudouser: True
    ssh_auth: ssh-rsa YOUR_SSH_PUB_KEY
  git:
    uid: 3019
    sudouser: True

absent_users:
  - badguy