Defaults timestamp_timeout=5
Defaults insults
Defaults passwd_timeout=10
Defaults env_reset


root ALL=(ALL) ALL

% for user in node.metadata['sudo']:
${user} ALL=(ALL) NOPASSWD:ALL
% endfor