A puppet module that constructs and verifies sudoers
Requires R.I. Pienaar's concat module.
class { 'sudo':; }
sudo::useralias {
'ADMINS':
list => [ hiera_array('admins') ];
}
sudo::userspec {
'ADMINS':
cmnd_spec_list => ['(ALL) ALL', 'NOPASSWD: /usr/sbin/service', 'NOPASSWD: /usr/bin/puppet agent -t'];
}