# Install with visudo, for example:
#   sudo visudo -f /etc/sudoers.d/trinity-operator-recovery
#
# Purpose:
# Allow trinity-operator to run one root-owned helper only, without a password.
# Do not grant general sudo.

User_Alias TRINITY_OPERATOR = trinity-operator
Cmnd_Alias MR_ANDERSON_RECOVERY = /usr/local/bin/mr-anderson-recovery-root status, /usr/local/bin/mr-anderson-recovery-root logs, /usr/local/bin/mr-anderson-recovery-root restart, /usr/local/bin/mr-anderson-recovery-root verify

Defaults!MR_ANDERSON_RECOVERY !requiretty
TRINITY_OPERATOR ALL=(root) NOPASSWD: MR_ANDERSON_RECOVERY