Linux-Help
/
formula-sudoers
mirror of
1
0
Fork 0
Code Issues Releases Wiki Activity

migrating over to aws

This commit is contained in:
Eldo Varghese 2019-08-26 17:57:30 -07:00
parent 33e267a6cc
commit cea9a67ef9
No known key found for this signature in database
GPG Key ID: B132CA06E20D5F80
3 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
sudoers/files/sudoers
View File

@ -1,4 +1,4 @@
{% from "sudoers/map.jinja" import ad_group_maps with context %}
{% from "sudoers/map.jinja" import plos_group_maps with context %}
{%- if (not included) %}
{%- set sudoers = pillar.get('sudoers', {}) %}
{%- if grains['os_family'] == 'Debian' %}
@ -95,11 +95,11 @@ Runas_Alias {{ name }} = {{ ",".join(runas) }}
%{{ group }} {{ spec }}
{%- endfor %}
{%- endfor %}
{%- for unix_group in ad_groups %}
{%- if unix_group in ad_group_maps.keys() %}
%{{ unix_group }} {{ ad_group_maps[unix_group] }}
{%- for unix_group in plos_groups %}
{%- if unix_group in plos_group_maps.keys() %}
%{{ unix_group }} {{ plos_group_maps[unix_group] }}
{%- else %}
%{{ unix_group }} {{ ad_group_maps['default'] }}
%{{ unix_group }} {{ plos_group_maps['default'] }}
{%- endif %}
{%- endfor %}

4
sudoers/init.sls
View File

@ -1,7 +1,7 @@
{% from "sudoers/map.jinja" import sudoers with context %}
# our list of plos core active directory groups
{%- set ad_groups = salt['pillar.get']('group_map:core').keys() %}
{%- set plos_groups = salt['pillar.get']('group_map:core').keys() %}
sudo:
pkg.installed:
@ -17,6 +17,6 @@ sudo:
- check_cmd: {{ sudoers.get('exec-prefix', '/usr/sbin') }}/visudo -c -f
- context:
included: False
ad_groups: {{ ad_groups|tojson }}
plos_groups: {{ plos_groups|tojson }}
- require:
- pkg: sudo

2
sudoers/map.jinja
View File

@ -16,7 +16,7 @@
}, merge=salt['pillar.get']('sudoers:lookup', None)) %}
# our plos active directory core groups sudoers permissions, filtered by environment
{% set ad_group_maps = salt['grains.filter_by']({
{% set plos_group_maps = salt['grains.filter_by']({
'default': { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT' },
'vagrant': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
'dev': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },