vm/chef/cookbooks/ceph/templates/default/etc-sudoers.d-deploymentuser.erb (1 lines of code) (raw):

<%= @cephdeploymentuser %> ALL = (root) NOPASSWD:ALL