bundles/sudo: add bundle

bundles/sudo/files/sudoers

@@ -0,0 +1,11 @@
+Defaults timestamp_timeout=5
+Defaults insults
+Defaults passwd_timeout=10
+Defaults env_reset
+
+
+root ALL=(ALL) ALL
+
+% for user in node.metadata['sudo']:
+${user} ALL=(ALL) NOPASSWD:ALL
+% endfor

bundles/sudo/items.py

@@ -0,0 +1,9 @@
+groups = {
+    'sudo': {},
+}
+
+files = {
+    '/etc/sudoers': {
+        'content_type': 'mako',
+    },
+}

bundles/sudo/metadata.py

@@ -0,0 +1,11 @@
+@metadata_processor
+def sudo_users(metadata):
+    sudoers = []
+
+    for username, config in metadata.get('users', {}).items():
+        if 'sudo' in config and config['sudo']:
+            sudoers.append(username)
+
+    metadata['sudo'] = sudoers
+
+    return metadata, RUN_ME_AGAIN