ceph-ansible/roles/ceph-client/tasks/pre_requisite.yml

---
- name: Copy ceph admin keyring
  when:
    - cephx | bool
    - copy_admin_key | bool
  block:
    - name: Get keys from monitors
      ceph_key:
        name: client.admin
        cluster: "{{ cluster }}"
        output_format: plain
        state: info
      environment:
        CEPH_CONTAINER_IMAGE: "{{ ceph_docker_registry + '/' + ceph_docker_image + ':' + ceph_docker_image_tag if containerized_deployment | bool else None }}"
        CEPH_CONTAINER_BINARY: "{{ container_binary }}"
      register: _admin_key
      delegate_to: "{{ groups.get(mon_group_name)[0] }}"
      run_once: true
      no_log: "{{ no_log_on_ceph_key_tasks }}"

    - name: Copy ceph key(s) if needed
      ansible.builtin.copy:
        dest: "/etc/ceph/{{ cluster }}.client.admin.keyring"
        content: "{{ _admin_key.stdout + '\n' }}"
        owner: "{{ ceph_uid if containerized_deployment | bool else 'ceph' }}"
        group: "{{ ceph_uid if containerized_deployment | bool else 'ceph' }}"
        mode: "{{ ceph_keyring_permissions }}"
      no_log: "{{ no_log_on_ceph_key_tasks }}"