From: Martin Zobel-Helas <zobel@debian.org>
Date: Sat, 19 Apr 2014 07:39:46 +0000 (+0200)
Subject: add OpenStack sudo entries
X-Git-Url: https://git.donarmstrong.com/?p=dsa-puppet.git;a=commitdiff_plain;h=37894e791d8d03333255b563d38f42dfbd121eee

add OpenStack sudo entries

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
---

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 3cb6266b..a9faf868 100644
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -210,3 +210,7 @@ nagiosadm	tchaikovsky=(root)		NOPASSWD: /usr/sbin/service icinga reload
 # voip stuff
 %debvoip	VOIPHOSTS=(root)	/usr/sbin/service resiprocate-turn-server restart, /usr/sbin/service repro restart
 
+# Openstack stuff
+Defaults:neutron !requiretty
+nova		NOVAHOSTS=(root)	NOPASSWD: /usr/bin/nova-rootwrap *
+neutron		NOVAHOSTS=(root)	NOPASSWD: /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *