default.rb 1.56 KB
#
# Author:: Earth U (<sysadmin @ chromedia.com>)
# Cookbook Name:: cfe-users
# Attribute:: default
#
# Copyright 2017, Chromedia Far East, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

default['cfe-users']['group'] = 'devs'
default['cfe-users']['gid']   = 4000
default['cfe-users']['data_bag'] =
  "users_devs_#{node.chef_environment}"

default['cfe-users']['admin_group'] = 'sysadmins'
default['cfe-users']['admin_gid']   = 4001
default['cfe-users']['admin_data_bag'] =
  "users_sysadmins_#{node.chef_environment}"

default['cfe-users']['post_run_reboot'] = true

default['authorization']['sudo']['groups'] = [
  node['cfe-users']['group'],
  node['cfe-users']['admin_group']
]

# Cookbook sudo constants.

default['authorization']['sudo']['passwordless']      = true
default['authorization']['sudo']['include_sudoers_d'] = false

if node['platform'] == 'ubuntu' && node['platform_version'].to_f == 14.04
  default['authorization']['sudo']['sudoers_defaults'] = [
    'env_reset',
    'mail_badpass',
    'secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"'
  ]
end