Supporting sudoers file

[mboisson]

For an internal project, we need to provide an extensive sudoers file to be deployed on all nodes.

[mboisson]

Would it be preferable to use the same strategy as for Duo (adding an existing puppet module) ?
https://www.puppet.com/docs/puppet/7/quick_start_sudo.html

[mboisson]

Supporting sudoers can be done easily by adding
mod 'saz-sudo', '8.0.0'
to the Puppetfile, then adding sudo to the packages installed by the tag you want, and then adding something like this to your yaml file:

sudo::ldap_enable: true
sudo::config_file_replace: false
sudo::prefix: '10-rsnt_'
sudo::purge_ignore: '[!10-rsnt_]*'
sudo::configs:
  'general':
    'content': |
      the content of your sudoers file
    'priority': 1