summarylogtreecommitdiffstats
path: root/ceph.sudoers
blob: 702a0072f62b8a4eb311de0d73fb65bcf7aa317d (plain)
1
2
3
4
5
6
7
8
## allow ceph daemons (which run as user ceph) to collect device health metrics
# Since v1.9.10 sudo allows for regex as a part of the COMMAND string.
# vim: ft=sudoers

# Used in src/common/blkdev.cc for collecting device metrics
# https://docs.ceph.com/en/latest/rados/operations/devices/#enabling-monitoring
ceph ALL=NOPASSWD: /usr/bin/smartctl ^-x --json=o /dev/[a-zA-Z0-9/_-]+$
ceph ALL=NOPASSWD: /usr/bin/nvme ^[a-zA-Z0-9_-]+ smart-log-add --json /dev/[a-zA-Z0-9/_-]+$