I want to make sure user bob is in wheel group on every server managed by puppet, but I do not want to change any other group membership for that user if on one node bob belongs to the apache group, and on another he is in sftpusers. I want to leave him in any group he belongs to, and additionally ensure he is in wheel.
What is the proper solution? It cannot be to
exec => usermod or something tacky like that. There must be something better I imagine.