chore: enable extra groups (#231)

- enable adding extra groups to the sysadmin user

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/231
This commit is contained in:
Ben Vincent 2025-03-30 01:20:59 +11:00
parent bdf420973d
commit e3e8b3484d

View File

@ -2,12 +2,22 @@
class profiles::accounts::sysadmin( class profiles::accounts::sysadmin(
String $password, String $password,
Array[String] $sshkeys = [], Array[String] $sshkeys = [],
Array[String] $extra_groups = [],
){ ){
$default_groups = [
'adm',
'admins',
'systemd-journal'
]
$groups = $extra_groups + $default_groups
profiles::base::account {'sysadmin': profiles::base::account {'sysadmin':
username => 'sysadmin', username => 'sysadmin',
uid => 1000, uid => 1000,
gid => 1000, gid => 1000,
groups => ['adm', 'admins', 'systemd-journal'], groups => $groups,
sshkeys => $sshkeys, sshkeys => $sshkeys,
sudo_rules => ['sysadmin ALL=(ALL) NOPASSWD:ALL'], sudo_rules => ['sysadmin ALL=(ALL) NOPASSWD:ALL'],
password => $password, password => $password,