ceph-ansible/roles/ceph-crash/tasks/main.yml

---
- name: Create and copy client.crash keyring
  when: cephx | bool
  block:
    - name: Create client.crash keyring
      ceph_key:
        name: "client.crash"
        caps:
          mon: 'allow profile crash'
          mgr: 'allow profile crash'
        cluster: "{{ cluster }}"
        dest: "{{ ceph_conf_key_directory }}"
        import_key: true
        mode: "{{ ceph_keyring_permissions }}"
        owner: "{{ ceph_uid if containerized_deployment | bool else 'ceph' }}"
        group: "{{ ceph_uid if containerized_deployment | bool else 'ceph' }}"
      environment:
        CEPH_CONTAINER_IMAGE: "{{ ceph_docker_registry + '/' + ceph_docker_image + ':' + ceph_docker_image_tag if containerized_deployment | bool else None }}"
        CEPH_CONTAINER_BINARY: "{{ container_binary }}"
      delegate_to: "{{ groups.get(mon_group_name, [])[0] }}"
      run_once: true
      no_log: "{{ no_log_on_ceph_key_tasks }}"

    - name: Get keys from monitors
      ceph_key:
        name: client.crash
        cluster: "{{ cluster }}"
        output_format: plain
        state: info
      environment:
        CEPH_CONTAINER_IMAGE: "{{ ceph_docker_registry + '/' + ceph_docker_image + ':' + ceph_docker_image_tag if containerized_deployment | bool else None }}"
        CEPH_CONTAINER_BINARY: "{{ container_binary }}"
      register: _crash_keys
      delegate_to: "{{ groups.get(mon_group_name)[0] }}"
      run_once: true
      no_log: "{{ no_log_on_ceph_key_tasks }}"

    - name: Copy ceph key(s) if needed
      ansible.builtin.copy:
        dest: "{{ ceph_conf_key_directory }}/{{ cluster }}.client.crash.keyring"
        content: "{{ _crash_keys.stdout + '\n' }}"
        owner: "{{ ceph_uid if containerized_deployment | bool else 'ceph' }}"
        group: "{{ ceph_uid if containerized_deployment | bool else 'ceph' }}"
        mode: "{{ ceph_keyring_permissions }}"
      no_log: "{{ no_log_on_ceph_key_tasks }}"

- name: Start ceph-crash daemon
  when: containerized_deployment | bool
  block:
    - name: Create /var/lib/ceph/crash/posted
      ansible.builtin.file:
        path: /var/lib/ceph/crash/posted
        state: directory
        mode: '0755'
        owner: "{{ ceph_uid }}"
        group: "{{ ceph_uid }}"

    - name: Include_tasks systemd.yml
      ansible.builtin.include_tasks: systemd.yml

- name: Start the ceph-crash service
  ansible.builtin.systemd:
    name: "{{ 'ceph-crash@' + ansible_facts['hostname'] if containerized_deployment | bool else 'ceph-crash.service' }}"
    state: started
    enabled: true
    masked: false
    daemon_reload: true