From: Peter Palfrader <peter@palfrader.org>
Date: Wed, 5 Aug 2015 06:59:21 +0000 (+0200)
Subject: allow nagios to check puppet's ca cert
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=3babf6ad98cb3b448493b308662bdce77964c5bf;p=mirror%2Fdsa-puppet.git

allow nagios to check puppet's ca cert
---

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 247993fa2..c36c0c3c9 100644
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -59,6 +59,7 @@ nagios		ALL=(ALL)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-filesystems ""
 nagios		ALL=(ALL)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-libs ""
 nagios		ALL=(ALL)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-stunnel-sanity ""
 nagios		ALL=(ALL)	NOPASSWD: /usr/local/sbin/dsa-check-libs ""
+nagios		handel=(ALL)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem
 # with smartarray controllers
 nagios		ALL=(ALL)	NOPASSWD: /sbin/hpasmcli ""
 nagios		ALL=(ALL)	NOPASSWD: /usr/bin/arrayprobe ""