D976.diff
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

D976.diff
View Options

	diff --git a/roles/saltmaster/sudo/init.sls b/roles/saltmaster/sudo/init.sls
	new file mode 100644
	--- /dev/null
	+++ b/roles/saltmaster/sudo/init.sls
	@@ -0,0 +1,20 @@
	+# -------------------------------------------------------------
	+# Salt — Salt master configuration
	+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	+# Project: Nasqueron
	+# Created: 2017-04-28
	+# License: Trivial work, not eligible to copyright
	+# -------------------------------------------------------------
	+
	+{% from "map.jinja" import dirs with context %}
	+
	+# -------------------------------------------------------------
	+# Sudo capabilities
	+#
	+# Ops should be able to sudo -u salt …
	+# -------------------------------------------------------------
	+
	+saltmaster_sudo_capabilities_file:
	+ file.managed:
	+ - name: {{ dirs.etc }}/sudoers.d/salt
	+ - source: salt://roles/saltmaster/sudo/files/salt
	diff --git a/top.sls b/top.sls
	--- a/top.sls
	+++ b/top.sls
	@@ -15,6 +15,8 @@
	- roles/core/rsyslog
	- roles/core/sshd
	- roles/core/letsencrypt
	+ 'local':
	+ - roles/saltmaster/sudo
	'eglide':
	- roles/shellserver/users
	- roles/shellserver/userland-software