
Depends-On: https://review.opendev.org/688636/ Change-Id: I9918ff6a91acde2a7d184e44b8a1014462596e39
80 lines
2.6 KiB
YAML
80 lines
2.6 KiB
YAML
---
|
|
- name: Fetching Ceph keyrings
|
|
become: true
|
|
command: docker exec ceph_mon /usr/bin/python{{ distro_python_version }} /usr/bin/fetch_ceph_keys.py
|
|
register: ceph_files_json
|
|
changed_when: (ceph_files_json.stdout | from_json).changed
|
|
failed_when: (ceph_files_json.stdout | from_json).failed
|
|
delegate_to: "{{ delegate_host }}"
|
|
run_once: True
|
|
|
|
- name: Reading json from variable
|
|
set_fact:
|
|
ceph_files: "{{ (ceph_files_json.stdout | from_json) }}"
|
|
|
|
- name: Pushing Ceph keyring for OSDs
|
|
become: true
|
|
bslurp:
|
|
src: "{{ item.content }}"
|
|
dest: "{{ node_config_directory }}/ceph-osd/{{ item.filename }}"
|
|
sha1: "{{ item.sha1 | default('')}}"
|
|
sha256: "{{ item.sha256 | default('')}}"
|
|
mode: 0600
|
|
with_items:
|
|
- "{{ ceph_files['ceph.client.admin.keyring'] }}"
|
|
when: inventory_hostname in groups['ceph-osd']
|
|
|
|
- name: Pushing Ceph keyrings for Mons
|
|
become: true
|
|
bslurp:
|
|
src: "{{ item.content }}"
|
|
dest: "{{ node_config_directory }}/ceph-mon/{{ item.filename }}"
|
|
sha1: "{{ item.sha1 | default('')}}"
|
|
sha256: "{{ item.sha256 | default('')}}"
|
|
mode: 0600
|
|
with_items:
|
|
- "{{ ceph_files['ceph.client.admin.keyring'] }}"
|
|
- "{{ ceph_files['ceph.client.mon.keyring'] }}"
|
|
- "{{ ceph_files['ceph.client.radosgw.keyring'] }}"
|
|
- "{{ ceph_files['ceph.monmap'] }}"
|
|
when: inventory_hostname in groups['ceph-mon']
|
|
|
|
- name: Pushing Ceph keyrings for Mgrs
|
|
become: true
|
|
bslurp:
|
|
src: "{{ item.content }}"
|
|
dest: "{{ node_config_directory }}/ceph-mgr/{{ item.filename }}"
|
|
sha1: "{{ item.sha1 | default('')}}"
|
|
sha256: "{{ item.sha256 | default('') }}"
|
|
mode: 0600
|
|
with_items:
|
|
- "{{ ceph_files['ceph.client.admin.keyring'] }}"
|
|
when: inventory_hostname in groups['ceph-mgr']
|
|
|
|
- name: Pushing Ceph keyrings for RGWs
|
|
become: true
|
|
bslurp:
|
|
src: "{{ item.content }}"
|
|
dest: "{{ node_config_directory }}/ceph-rgw/{{ item.filename }}"
|
|
sha1: "{{ item.sha1 | default('')}}"
|
|
sha256: "{{ item.sha256 | default('')}}"
|
|
mode: 0600
|
|
with_items:
|
|
- "{{ ceph_files['ceph.client.admin.keyring'] }}"
|
|
- "{{ ceph_files['ceph.client.radosgw.keyring'] }}"
|
|
when: inventory_hostname in groups['ceph-rgw']
|
|
|
|
- name: Pushing Ceph keyrings for NFSs
|
|
become: true
|
|
bslurp:
|
|
src: "{{ item.content }}"
|
|
dest: "{{ node_config_directory }}/ceph-nfs/{{ item.filename }}"
|
|
sha1: "{{ item.sha1 | default('')}}"
|
|
sha256: "{{ item.sha256 | default('')}}"
|
|
mode: 0600
|
|
with_items:
|
|
- "{{ ceph_files['ceph.client.admin.keyring'] }}"
|
|
when:
|
|
- inventory_hostname in groups['ceph-nfs']
|
|
- enable_ceph_nfs | bool
|