diff --git a/pillar/users/shellgroups.sls b/pillar/users/shellgroups.sls index 31f10f8..d33ae45 100644 --- a/pillar/users/shellgroups.sls +++ b/pillar/users/shellgroups.sls @@ -1,29 +1,35 @@ # ------------------------------------------------------------- # Salt — Service groups list # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - # Project: Eglide # Created: 2017-01-24 # License: Trivial work, not eligible to copyright # ------------------------------------------------------------- # ------------------------------------------------------------- # Nasqueron # ------------------------------------------------------------- shellgroups: + ops: + gid: 3001 + description: Nasqueron Operations + members: + - dereckson + - sandlayth chaton-dev: gid: 827 description: Bonjour chaton members: - hlp deployment: gid: 828 description: Build softwares to be installed on the servers members: - dereckson nasqueron-irc: gid: 829 description: Manages IRC bots used for Nasqueron projects members: - dereckson - sandlayth diff --git a/roles/core/sudo/files/ops b/roles/core/sudo/files/ops new file mode 100644 index 0000000..5964d83 --- /dev/null +++ b/roles/core/sudo/files/ops @@ -0,0 +1,17 @@ +# ------------------------------------------------------------- +# SaltStack deployment +# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +# Project: Nasqueron +# Created: 2017-10-19 +# License: Trivial work, not eligible to copyright +# Source file: roles/core/sudo/files/ops +# ------------------------------------------------------------- +# +# <auto-generated> +# This file is managed by our rOPS SaltStack repository. +# +# Changes to this file may cause incorrect behavior +# and will be lost if the state is redeployed. +# </auto-generated> + +%ops ALL = (ALL) NOPASSWD: ALL diff --git a/roles/core/sudo/init.sls b/roles/core/sudo/init.sls new file mode 100644 index 0000000..e452e49 --- /dev/null +++ b/roles/core/sudo/init.sls @@ -0,0 +1,19 @@ +# ------------------------------------------------------------- +# Salt — sudo configuration +# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +# Project: Nasqueron +# Created: 2017-10-19 +# License: Trivial work, not eligible to copyright +# ------------------------------------------------------------- + +{% from "map.jinja" import dirs with context %} + +# ------------------------------------------------------------- +# Sudo capabilities +# +# Ops should be able to sudo … +# ------------------------------------------------------------- + +{{ dirs.etc }}/sudoers.d/ops: + file.managed: + - source: salt://roles/core/sudo/files/ops