puppet-prod/site/profiles/manifests/accounts/sysadmin.pp
Ben Vincent ccd048c729 feat: dont set gid/uid for sysadmin
- sysadmin doesnt need to be a specific uid/gid, the next available
  uid/gid is fine
2025-04-26 19:57:08 +10:00

25 lines
522 B
Puppet

# create the sysadmin user
class profiles::accounts::sysadmin(
String $password,
Array[String] $sshkeys = [],
Array[String] $extra_groups = [],
){
$default_groups = [
'adm',
'admins',
'systemd-journal'
]
$groups = $extra_groups + $default_groups
profiles::base::account {'sysadmin':
username => 'sysadmin',
groups => $groups,
sshkeys => $sshkeys,
sudo_rules => ['sysadmin ALL=(ALL) NOPASSWD:ALL'],
password => $password,
require => Group['admins'],
}
}