Add role for configuring sudoers groups

[MoteHue]

No description provided.

[priteau]

Why keep it limited to sudoers groups? It could easily support both users and groups.

[MoteHue]

Why keep it limited to sudoers groups? It could easily support both users and groups.

No reason to keep it limited, this is just all we needed for the customer site.
I'll mark as draft and come back to propose handling users too.

[sjpb]

I'll mark as draft and come back to propose handling users too.

I definitely don't think we should expand if we don't need it. I think current scope/role/PR title is OK TBH.

It does definitely need to note in ansible/roles/compute_init/README.md the level of support it provides for running via compute-init. And ideally that needs to not be none.

[priteau]

Add more indentation to these lines.

[priteau]

My issue with keeping it as it is now: if we want to add users later, we might want to change the way the parameters are defined. It is easier to do now while there are no users of the role.

Also, much of what you are doing can be done with https://docs.ansible.com/ansible/latest/collections/community/general/sudoers_module.html. Maybe it could just be a thin wrapper around it?

[sjpb]

We also have support for sudo rules in basic_users. If we merge this [edit: + user support], should we remove that in this PR too (which implies some effort required to migrate clients using it)?

[sjpb]

Also, much of what you are doing can be done with https://docs.ansible.com/ansible/latest/collections/community/general/sudoers_module.html. Maybe it could just be a thin wrapper around it?

Ok so if we have "native" Ansible support and a single client needing this, I'm strongly in favor of just leaving this as a hook for the moment. We can't wrap every Ansible module in a role. Is there a reason for not leaving it like that?