add OpenStack sudo entries

[dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 686bbd11f59b4d87a333bc15f37adb1b508e2f86..a9faf868d27b1ea2b930c8fe6dfd508ac527cc40 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -60,6 +60,8 @@ nagios                ALL=(ALL)       NOPASSWD: /sbin/hpasmcli ""
 nagios         ALL=(ALL)       NOPASSWD: /usr/bin/arrayprobe ""
 nagios         franck=(ALL)    NOPASSWD: /usr/bin/arrayprobe -f /dev/cciss/c1d0
 nagios         ALL=(ALL)       NOPASSWD: /usr/sbin/hpacucli controller all show
+nagios         ALL=(ALL)       NOPASSWD: /usr/sbin/hpacucli controller slot=[0129] ld all show
+nagios         ALL=(ALL)       NOPASSWD: /usr/sbin/hpacucli controller slot=[0129] ld [0-9] show
 nagios         ALL=(ALL)       NOPASSWD: /usr/sbin/hpacucli controller slot=[0129] pd all show
 nagios         ALL=(ALL)       NOPASSWD: /usr/sbin/hpacucli controller slot=[0129] pd [0-9]\:[0-9] show
 nagios         ALL=(ALL)       NOPASSWD: /usr/sbin/hpacucli controller slot=[0129] pd [0-9][EIC]\:[0-9]\:[0-9] show
@@ -208,3 +210,7 @@ nagiosadm   tchaikovsky=(root)              NOPASSWD: /usr/sbin/service icinga reload
 # voip stuff
 %debvoip       VOIPHOSTS=(root)        /usr/sbin/service resiprocate-turn-server restart, /usr/sbin/service repro restart
 
+# Openstack stuff
+Defaults:neutron !requiretty
+nova           NOVAHOSTS=(root)        NOPASSWD: /usr/bin/nova-rootwrap *
+neutron                NOVAHOSTS=(root)        NOPASSWD: /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *