ceph-ansible/roles/ceph-dashboard/tasks/configure_dashboard.yml

---
- name: set_fact container_exec_cmd
  set_fact:
    container_exec_cmd: "{{ container_binary }} exec ceph-mon-{{ hostvars[groups[mon_group_name][0]]['ansible_hostname'] }}"
  when: containerized_deployment | bool

- name: disable SSL for dashboard
  command: "{{ container_exec_cmd }} ceph config set mgr mgr/dashboard/ssl false"
  delegate_to: "{{ groups[mon_group_name][0] }}"
  when: dashboard_protocol == "http"

- name: enable SSL for dashboard
  command: "{{ container_exec_cmd }} ceph config set mgr mgr/dashboard/ssl true"
  delegate_to: "{{ groups[mon_group_name][0] }}"
  when: dashboard_protocol == "https"

- name: copy dashboard SSL certificate file
  copy:
    src: "{{ dashboard_crt }}"
    dest: "/etc/ceph/ceph-dashboard.crt"
    owner: root
    group: root
    mode: 0440
  when:
    - dashboard_crt | bool
    - dashboard_protocol == "https"

- name: copy dashboard SSL certificate key
  copy:
    src: "{{ dashboard_key }}"
    dest: "/etc/ceph/ceph-dashboard.key"
    owner: root
    group: root
    mode: 0440
  when:
    - dashboard_key | bool
    - dashboard_protocol == "https"

- name: generate a Self Signed OpenSSL certificate for dashboard
  shell: |
    test -f /etc/ceph/ceph-dashboard.key -a -f /etc/ceph/ceph-dashboard.crt || \
    openssl req -new -nodes -x509 -subj '/O=IT/CN=ceph-dashboard' -days 3650 -keyout /etc/ceph/ceph-dashboard.key -out /etc/ceph/ceph-dashboard.crt -extensions v3_ca
  when:
    - dashboard_protocol == "https"
    - not dashboard_key | bool or not dashboard_crt | bool

- name: import dashboard certificate file
  command: "{{ container_exec_cmd }} ceph config-key set mgr/dashboard/crt -i /etc/ceph/ceph-dashboard.crt"
  changed_when: false
  delegate_to: "{{ groups[mon_group_name][0] }}"
  when: dashboard_protocol == "https"

- name: import dashboard certificate key
  command: "{{ container_exec_cmd }} ceph config-key set mgr/dashboard/key -i /etc/ceph/ceph-dashboard.key"
  changed_when: false
  delegate_to: "{{ groups[mon_group_name][0] }}"
  when: dashboard_protocol == "https"

- name: "set the dashboard port ({{ dashboard_port }})"
  shell: |
    {{ container_exec_cmd }} ceph config set mgr mgr/dashboard/server_port {{ dashboard_port }} || \
    {{ container_exec_cmd }} ceph config-key set mgr/dashboard/server_port {{ dashboard_port }}
  delegate_to: "{{ groups[mon_group_name][0] }}"

- name: "set the dashboard SSL port ({{ dashboard_port }})"
  command: "{{ container_exec_cmd }} ceph config set mgr mgr/dashboard/ssl_server_port {{ dashboard_port }}" # Do not use the old fashioned config-key way ssl_server_port, it was not supported when this option was introduced
  delegate_to: "{{ groups[mon_group_name][0] }}"
  failed_when: false # Do not fail if the option does not exist, it only exists post-14.2.0

- name: disable mgr dashboard module (restart)
  command: "{{ container_exec_cmd }} ceph mgr module disable dashboard"
  delegate_to: "{{ groups[mon_group_name][0] }}"
  changed_when: false

- name: enable mgr dashboard module (restart)
  command: "{{ container_exec_cmd }} ceph mgr module enable dashboard"
  delegate_to: "{{ groups[mon_group_name][0] }}"
  changed_when: false

- name: set or update dashboard admin username and password
  shell: |
    if {{ container_exec_cmd }} ceph dashboard ac-user-show {{ dashboard_admin_user }}; then
      {{ container_exec_cmd }} ceph dashboard ac-user-set-password {{ dashboard_admin_user }} {{ dashboard_admin_password }}
    else
      {{ container_exec_cmd }} ceph dashboard ac-user-create {{ dashboard_admin_user }} {{ dashboard_admin_password }} administrator
    fi
  retries: 6
  delay: 5
  register: ac_result
  delegate_to: "{{ groups[mon_group_name][0] }}"
  until: ac_result.rc == 0

- name: set grafana url
  command: "{{ container_exec_cmd }} ceph dashboard set-grafana-api-url {{ dashboard_protocol }}://{{ dashboard_url }}:{{ grafana_port }}/"
  delegate_to: "{{ groups[mon_group_name][0] }}"
  changed_when: false

- name: set alertmanager host
  command: "{{ container_exec_cmd }} ceph dashboard set-alertmanager-api-host {{ dashboard_protocol }}://{{ dashboard_url }}:{{ alertmanager_port }}/"
  delegate_to: "{{ groups[mon_group_name][0] }}"
  changed_when: false

- name: dashboard object gateway management frontend
  when: groups.get(rgw_group_name, []) | length > 0
  block:
    - name: create radosgw system user
      shell: "timeout 20 {{ container_exec_cmd }} radosgw-admin user create --uid={{ dashboard_rgw_api_user_id }} --display-name='Ceph dashboard' --system"
      register: rgw_user_output
      until: rgw_user_output.rc == 0
      retries: 3
      delegate_to: "{{ groups[mon_group_name][0] }}"

    - name: get the rgw access and secret keys
      set_fact:
        rgw_access_key: "{{ (rgw_user_output.stdout | from_json)['keys'][0]['access_key'] }}"
        rgw_secret_key: "{{ (rgw_user_output.stdout | from_json)['keys'][0]['secret_key'] }}"

    - name: set the rgw user
      command: "{{ container_exec_cmd }} ceph dashboard set-rgw-api-user-id {{ dashboard_rgw_api_user_id }}"
      delegate_to: "{{ groups[mon_group_name][0] }}"
      changed_when: false

    - name: set the rgw access key
      command: "{{ container_exec_cmd }} ceph dashboard set-rgw-api-access-key {{ rgw_access_key }}"
      delegate_to: "{{ groups[mon_group_name][0] }}"
      changed_when: false

    - name: set the rgw secret key
      command: "{{ container_exec_cmd }} ceph dashboard set-rgw-api-secret-key {{ rgw_secret_key }}"
      delegate_to: "{{ groups[mon_group_name][0] }}"
      changed_when: false

    - name: set the rgw host
      command: "{{ container_exec_cmd }} ceph dashboard set-rgw-api-host {{ dashboard_rgw_api_host }}"
      changed_when: false
      delegate_to: "{{ groups[mon_group_name][0] }}"
      when: dashboard_rgw_api_host != ''

    - name: set the rgw port
      command: "{{ container_exec_cmd }} ceph dashboard set-rgw-api-port {{ dashboard_rgw_api_port }}"
      changed_when: false
      delegate_to: "{{ groups[mon_group_name][0] }}"
      when: dashboard_rgw_api_port != ''

    - name: set the rgw scheme
      command: "{{ container_exec_cmd }} ceph dashboard set-rgw-api-scheme {{ dashboard_rgw_api_scheme }}"
      changed_when: false
      delegate_to: "{{ groups[mon_group_name][0] }}"
      when: dashboard_rgw_api_scheme != ''

    - name: set the rgw admin resource
      command: "{{ container_exec_cmd }} ceph dashboard set-rgw-api-admin-resource {{ dashboard_rgw_api_admin_resource }}"
      changed_when: false
      delegate_to: "{{ groups[mon_group_name][0] }}"
      when: dashboard_rgw_api_admin_resource != ''

    - name: disable ssl verification for rgw
      command: "{{ container_exec_cmd }} ceph dashboard set-rgw-api-ssl-verify False"
      changed_when: false
      delegate_to: "{{ groups[mon_group_name][0] }}"
      when: dashboard_rgw_api_no_ssl_verify | bool

- name: disable mgr dashboard module (restart)
  command: "{{ container_exec_cmd }} ceph mgr module disable dashboard"
  changed_when: false
  delegate_to: "{{ groups[mon_group_name][0] }}"

- name: enable mgr dashboard module (restart)
  command: "{{ container_exec_cmd }} ceph mgr module enable dashboard"
  changed_when: false
  delegate_to: "{{ groups[mon_group_name][0] }}"