Skip to content

Instantly share code, notes, and snippets.

Created March 11, 2015 18:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save anonymous/eba7170c188abc2b9be7 to your computer and use it in GitHub Desktop.
Save anonymous/eba7170c188abc2b9be7 to your computer and use it in GitHub Desktop.
{% from '_contexts/groups/root.sls' import group_root with context %}
{% if grains['os'] == 'FreeBSD' %}
{% set sudoers_path = '/usr/local/etc/sudoers' %}
{% set sudoers_inc_path = '/usr/local/etc/sudoers.d' %}
{% else %}
{% set sudoers_path = '/etc/sudoers' %}
{% set sudoers_inc_path = '/etc/sudoers.d' %}
{% endif %}
sudo:
pkg:
- installed
{{ sudoers_path }}:
file.managed:
- source: salt://packages/sudo/files/etc-sudoers
- user: root
- group: {{ group_root }}
- mode: 440
- template: jinja
- context:
sudoers_inc_path: {{ sudoers_inc_path }}
- require:
- pkg: sudo
{{ sudoers_inc_path }}:
file.directory:
- user: root
- group: {{ group_root }}
- mode: 0750
- require:
- pkg: sudo
{{ sudoers_inc_path }}/apps:
file.managed:
- source: salt://packages/sudo/files/etc-sudoers.d-apps
- user: root
- group: {{ group_root }}
- mode: 440
- require:
- pkg: sudo
{{ sudoers_inc_path }}/apps-system-commands:
file.managed:
- source: salt://packages/sudo/files/etc-sudoers.d-apps-system-commands
- user: root
- group: {{ group_root }}
- mode: 440
- require:
- pkg: sudo
{% if 'lab' in grains['fqdn'] %}
{{ sudoers_inc_path }}/apps-lab-commands:
file.managed:
- source: salt://packages/sudo/files/etc-sudoers.d-apps-lab-commands
- user: root
- group: {{ group_root }}
- mode: 440
- require:
- pkg: sudo
{% endif %}
{% from '_contexts/groups/root.sls' import group_root with context %}
{% if grains['os'] == 'FreeBSD' %}
{% set sudoers_path = '/usr/local/etc/sudoers' %}
{% set sudoers_inc_path = '/usr/local/etc/sudoers.d' %}
{% else %}
{% set sudoers_path = '/etc/sudoers' %}
{% set sudoers_inc_path = '/etc/sudoers.d' %}
{% endif %}
sudo:
pkg:
- installed
sudoers-add-dir:
file.directory:
- name: {{ sudoers_inc_path }}
- user: root
- group: {{ group_root }}
- mode: 0750
- require:
- pkg: sudo
sudoers-add-foreman:
file.managed:
- name: {{ sudoers_inc_path }}/foreman
- source: salt://packages/sudo/files/etc-sudoers.d-foreman
- user: root
- group: {{ group_root }}
- mode: 440
- require:
- pkg: sudo
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment