add jenkins sudoer - https://gitlab.confdroid.com/internal/confdroid_management/-/issues/283

2025-10-21 17:14:08 +02:00
parent 94b6c68d9c
commit 7e35fcaa2b
25 changed files with 42 additions and 3243 deletions
--- a/manifests/main/files.pp
+++ b/manifests/main/files.pp
@@ -8,5 +8,23 @@ class jenkins_cd::main::files (
 ) inherits jenkins_cd::params {
  if $fqdn == $js_host_fqdn {
    require jenkins_cd::main::dirs
+    if $js_use_sudo == true {
+      file { $js_sudoers_file:
+        ensure   => file,
+        owner    => 'root',
+        group    => 'root',
+        mode     => '0440',
+        selrange => s0,
+        selrole  => object_r,
+        seltype  => etc_t,
+        seluser  => system_u,
+        content  => template($js_sudoers_erb),
+      }
+    }
+    if $js_use_sudo != true {
+      file { $js_sudoers_file:
+        ensure   => absent,
+      }
+    }
  }
 }