commit eb2e3d2c9d117d0351bee843a115510c9f0d0f9e
author Petr Michalec <epcim@apealive.net> Wed Feb 22 10:32:02 2017 +0100
committer Petr Michalec <epcim@apealive.net> Thu Mar 09 16:44:02 2017 +0100
tree 3de96ff15496befc7c682f2eafe55ae658efb7d3
parent 335465f5da60ddfc10e668ebb56b7aef4bc66e21

add support team ssh keys

openssh/server/team/l2_support.yml

diff --git a/openssh/server/team/l2_support.yml b/openssh/server/team/l2_support.yml
new file mode 100644
index 0000000..e6fd721
--- /dev/null
+++ b/openssh/server/team/l2_support.yml
@@ -0,0 +1,38 @@
+classes:
+- system.linux.system.sudo
+# L2
+- system.openssh.server.team.support.aepifanov
+- system.openssh.server.team.support.apetrenko
+- system.openssh.server.team.support.ashishkin
+- system.openssh.server.team.support.atarasov
+- system.openssh.server.team.support.dklepikov
+- system.openssh.server.team.support.dsutyagin
+- system.openssh.server.team.support.ekozhemyakin
+- system.openssh.server.team.support.enikanorov
+- system.openssh.server.team.support.fsoppelsa
+- system.openssh.server.team.support.manashkin
+- system.openssh.server.team.support.nkondra
+- system.openssh.server.team.support.obryndzii
+- system.openssh.server.team.support.oliemieshko
+- system.openssh.server.team.support.sovsianikov
+parameters:
+  linux:
+    system:
+      group:
+        supportl2:
+          enabled: true
+          name: supportl2
+      sudo:
+        enabled: true
+        aliases:
+          command:
+            L2_SUPPORT_SALT: ${_param:sudo_salt_safe}
+            L2_SUPPORT_SALT_TRUSTED: ${_param:sudo_salt_trusted}
+            L2_SUPPORT_RESTRICTED_SHELLS: ${_param:sudo_shells}
+            L2_SUPPORT_RESTRICTED: ${_param:sudo_restricted_su}
+        groups:
+          supportl2:
+            commands:
+                - ALL
+                - '!L2_SUPPORT_RESTRICTED_SHELLS'
+                - '!L2_SUPPORT_RESTRICTED'