ansible-sudoers
ansible-sudoers copied to clipboard
Simple sudoers role for Ansible
Deprecation warning
Unmaintained project. Please, use good alternative: wtcross.sudoers
Simple sudoers role
This role installs sudo package, ensure that /etc/sudoers.d included and create or remove sudoers files in /etc/sudoers.d. For now, each sudoer has access to all commands within a variable set of users, and global setting determines whether NOPASSWD is set or not.
Variables
- sudoers_filename - file name in /etc/sudoers.d (required)
- sudoers - A dictonary of users who have sudo access and to what users they have
permission to execute commands as. Use '%foo' to specify that users in a given
group have sudo access.
- defaults: []
- example: Check
ansible-sudoers.ymlplaybook for an example where usertestoneas permission to execute commands as usersvagrantandrootand usertesttwohas permission to execute commands as any user.
- sudoers_nopasswd - if set, NOPASSWD is added to all sudoers entries. Use this
when users don't have passwords set.
- default: true
- sudoers_remove - if enabled, remove /etc/sudoers.d/{{ sudoers_filename }} instead
of create.
- default: false
TODO
- Ability to create users with not full access