Ceph: Logrotate does not work for cephadm logs

Issue

Logrotate does not work for cephadm logs
cephadm.log rotation fails
The cephadm file in /etc/logrotate.d is missing the su directive.

# logrotate -v -d /etc/logrotate.conf
...
rotating pattern: /var/log/ceph/cephadm.log  after 1 days (7 rotations)
empty log files are not rotated, old logs are removed
considering log /var/log/ceph/cephadm.log
error: skipping "/var/log/ceph/cephadm.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.