Ben Vincent
1e3ce0ec1c
- sysadmin doesnt need to be a specific uid/gid, the next available uid/gid is fine Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/265
25 lines
522 B
Puppet
25 lines
522 B
Puppet
# create the sysadmin user
|
|
class profiles::accounts::sysadmin(
|
|
String $password,
|
|
Array[String] $sshkeys = [],
|
|
Array[String] $extra_groups = [],
|
|
){
|
|
|
|
$default_groups = [
|
|
'adm',
|
|
'admins',
|
|
'systemd-journal'
|
|
]
|
|
|
|
$groups = $extra_groups + $default_groups
|
|
|
|
profiles::base::account {'sysadmin':
|
|
username => 'sysadmin',
|
|
groups => $groups,
|
|
sshkeys => $sshkeys,
|
|
sudo_rules => ['sysadmin ALL=(ALL) NOPASSWD:ALL'],
|
|
password => $password,
|
|
require => Group['admins'],
|
|
}
|
|
}
|