Defaults  env_keep += "ANSIBLE_CONFIG"
Defaults  secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/rancher/rke2/bin"

ilm ALL = NOPASSWD: /sbin/shutdown -r now
ilm ALL = NOPASSWD: /sbin/shutdown -h now
ilm ALL = NOPASSWD: /usr/bin/ansible-playbook /etc/ilm-ansible/playbooks/ilm.yml
ilm ALL = NOPASSWD: /usr/bin/ansible-playbook /etc/ilm-ansible/playbooks/ilm.yml --tags ilm
ilm ALL = NOPASSWD: /usr/bin/ansible-playbook /etc/ilm-ansible/playbooks/ilm.yml --tags network
ilm ALL = NOPASSWD: /usr/bin/ansible-playbook /etc/ilm-ansible/playbooks/ilm.yml --tags http_proxy
ilm ALL = NOPASSWD: /usr/bin/ansible-playbook /etc/ilm-ansible/playbooks/ilm.yml --tags ntp
ilm ALL = NOPASSWD: /usr/bin/ansible-playbook /etc/ilm-ansible/playbooks/ilm.yml --diff
ilm ALL = NOPASSWD: /usr/local/bin/rke2-uninstall.sh
ilm ALL = NOPASSWD: /usr/local/bin/update-hostname.sh
ilm ALL = NOPASSWD: /var/lib/rancher/rke2/bin/kubectl delete ns ilm
ilm ALL = NOPASSWD: /var/lib/rancher/rke2/bin/kubectl -n ilm get all
ilm ALL = NOPASSWD: /var/lib/rancher/rke2/bin/kubectl get pods -n kube-system --no-headers=true
ilm ALL = NOPASSWD: /var/lib/rancher/rke2/bin/kubectl get pods -n ingress-nginx --no-headers=true
ilm ALL = NOPASSWD: /var/lib/rancher/rke2/bin/kubectl get pods -n cert-manager --no-headers=true
ilm ALL = NOPASSWD: /var/lib/rancher/rke2/bin/kubectl get pods -n ilm --no-headers=true
ilm ALL = NOPASSWD: /usr/bin/rm /root/install/docker-secret.yaml
ilm ALL = NOPASSWD: /usr/bin/rm /root/install/values.local.yaml
ilm ALL = NOPASSWD: /usr/bin/apt update
ilm ALL = NOPASSWD: /usr/bin/apt upgrade
ilm ALL = NOPASSWD: /usr/bin/ilm-update-hostname
ilm ALL = NOPASSWD: /usr/bin/ilm-update-hostname
