pillar-example.yml

# The 'groups' and 'users' elements should be within the scope
# of all minions, so that users/groups with no privileges can be
# ensured as absent.

groups:
  admin:
    gid: 2000
  dbadmin:
    gid: 2001
  dev:
    gid: 2002

users:
  # Bob is a db admin with privileges in all environments
  bob:
    uid: 1000
    groups:
      __global__:
        - dbadmin
    ssh_auth:
      - ssh-rsa AAAAAAAAAAAAA.....

  # John is a developer, with privileges in the sandbox env
  john:
    uid: 1001
    groups:
      sandbox:
        - dev
    ssh_auth:
      - ssh-rsa AAAAAABBBBBBB.....

# The following elements should be defined on the minion (or minion group) level.

sudo-groups:
  - admin
  - dbadmin

user-groups:
  - dev