ceph-ansible/roles/ceph-mon/tasks/secure_cluster.yml

---
- name: collect all the pools
  command: rados lspools
  register: ceph_pools
  when: "{{ ceph_version.stdout | version_compare('0.94', '>=') }}"

- name: secure the cluster
  command: ceph osd pool set {{ item[0] }} {{ item[1] }} true
  with_nested:
    - ceph_pools.stdout_lines
    - secure_cluster_flags
  when: "{{ ceph_version.stdout | version_compare('0.94', '>=') }}"