ceph-ansible/roles/ceph-mon/tasks/openstack_config.yml

---
- name: list existing pool(s)
  command: >
    {{ docker_exec_cmd | default('') }} ceph --cluster {{ cluster }}
    osd pool get {{ item.name }} size
  with_items: "{{ openstack_pools | unique }}"
  register: created_pools
  failed_when: false

- name: create openstack pool(s)
  command: >
    {{ docker_exec_cmd }} ceph --cluster {{ cluster }}
    osd pool create {{ item.0.name }}
    {{ item.0.pg_num }}
    {{ item.0.pgp_num | default(item.0.pg_num) }}
    {{ 'replicated_rule' if item.0.rule_name | default('replicated_rule') == '' else item.0.rule_name | default('replicated_rule') }}
    {{ 1 if item.0.type|default(1) == 'replicated' else 3 if item.0.type|default(1) == 'erasure' else item.0.type|default(1) }}
    {%- if (item.0.type | default("1") == '3' or item.0.type | default("1") == 'erasure') and item.0.erasure_profile != '' %}
    {{ item.0.erasure_profile }}
    {%- endif %}
    {{ item.0.expected_num_objects | default('') }}
  with_together:
    - "{{ openstack_pools | unique }}"
    - "{{ created_pools.results }}"
  changed_when: false
  when:
    - item.1.get('rc', 0) != 0

- name: assign rbd application to pool(s)
  command: "{{ docker_exec_cmd }} ceph --cluster {{ cluster }} osd pool application enable {{ item.name }} rbd"
  with_items: "{{ openstack_pools | unique }}"
  changed_when: false
  when:
    - ceph_release_num[ceph_release] >= ceph_release_num['luminous']

- name: create openstack cephx key(s)
  ceph_key:
    state: present
    name: "{{ item.name }}"
    caps: "{{ item.caps }}"
    secret: "{{ item.key | default('') }}"
    containerized: "{{ docker_exec_cmd | default(False) }}"
    cluster: "{{ cluster }}"
    mode: "{{ item.mode|default(omit) }}"
  with_items: "{{ openstack_keys }}"
  when: cephx

- name: fetch openstack cephx key(s)
  fetch:
    src: "/etc/ceph/{{ cluster }}.{{ item.name }}.keyring"
    dest: "{{ fetch_directory }}/{{ fsid }}/etc/ceph/{{ cluster }}.{{ item.name }}.keyring"
    flat: yes
  with_items: "{{ openstack_keys }}"

- name: copy to other mons the openstack cephx key(s)
  copy:
    src: "{{ fetch_directory }}/{{ fsid }}/etc/ceph/{{ cluster }}.{{ item.1.name }}.keyring"
    dest: "/etc/ceph/{{ cluster }}.{{ item.1.name }}.keyring"
    owner: "{{ ceph_uid }}"
    group: "{{ ceph_uid }}"
    mode: "{{ item.1.mode|default(omit) }}"
  with_nested:
    - "{{ groups[mon_group_name] }}"
    - "{{ openstack_keys }}"
  delegate_to: "{{ item.0 }}"
  when:
    - cephx
    - openstack_config
    - item.0 != groups[mon_group_name] | last