Custom sudo Rules

Custom sudo rules can be specify in hiera as follows:

aaa::sudo_rules:
   - 'Defaults:telegraf !requiretty, !syslog'
   - 'telegraf ALL=(root) NOPASSWD: /usr/lib/telegraf/scripts/nxserver_report.sh'

Beside that you might also simply deploy a file to /etc/sudoers.d e.g. via a technique described in Distribute Files.