3 files changed, 5 insertions, 1 deletions
diff --git a/docker/ironic/ironic-inspector/Dockerfile.j2 b/docker/ironic/ironic-inspector/Dockerfile.j2
index 491531ba4..8adf9dfe7 100644
--- a/docker/ironic/ironic-inspector/Dockerfile.j2
+++ b/docker/ironic/ironic-inspector/Dockerfile.j2
@@ -17,6 +17,8 @@ MAINTAINER {{ maintainer }}
 
 {{ macros.install_packages(ironic_inspector_packages | customizable("packages")) }}
 
+COPY ironic_sudoers_binary /etc/sudoers.d/kolla_ironic_inspector_sudoers
+
 {% elif install_type == 'source' %}
     {% if base_distro in ['ubuntu'] %}
         {% set ironic_inspector_packages = ['iptables'] %}
@@ -37,9 +39,10 @@ RUN ln -s ironic-inspector-source/* ironic-inspector \
     && cp -r /ironic-inspector/rootwrap.d/ /etc/ironic-inspector/ \
     && sed -i 's|^exec_dirs.*|exec_dirs=/var/lib/kolla/venv/bin,/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin|g' /etc/ironic-inspector/rootwrap.conf
 
+COPY ironic_sudoers_source /etc/sudoers.d/kolla_ironic_inspector_sudoers
+
 {% endif %}
 
-COPY ironic_sudoers /etc/sudoers.d/kolla_ironic_inspector_sudoers
 COPY extend_start.sh /usr/local/bin/kolla_ironic_extend_start
 
 RUN chmod 750 /etc/sudoers.d \
diff --git a/docker/ironic/ironic-inspector/ironic_sudoers_binary b/docker/ironic/ironic-inspector/ironic_sudoers_binary
new file mode 100644
index 000000000..d1e0ef68d
--- /dev/null
+++ b/docker/ironic/ironic-inspector/ironic_sudoers_binary
@@ -0,0 +1 @@
+ironic ALL=(root) NOPASSWD: /usr/bin/ironic-inspector-rootwrap /etc/ironic-inspector/rootwrap.conf *
diff --git a/docker/ironic/ironic-inspector/ironic_sudoers b/docker/ironic/ironic-inspector/ironic_sudoers_source
index 612f8dc3a..612f8dc3a 100644
--- a/docker/ironic/ironic-inspector/ironic_sudoers
+++ b/docker/ironic/ironic-inspector/ironic_sudoers_source