ceph
/
ceph-ansible
mirror of https://github.com/ceph/ceph-ansible.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Mon: Copy openstack keyring files on all mons 

Copies all created openstack keys on all mons.

Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
pull/1694/head
Guillaume Abrioux 2017-07-18 23:11:55 +02:00
parent 92fc34eb9f
commit 07fb79ce13
1 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
roles/ceph-mon/tasks/openstack_config.yml
View File

@ -8,7 +8,7 @@
# A future version could use "--caps CAPSFILE" # A future version could use "--caps CAPSFILE"
# which will set all of capabilities associated with a given key, for all subsystems # which will set all of capabilities associated with a given key, for all subsystems
- name: create openstack key(s) - name: create openstack key(s)
shell: "{{ docker_exec_cmd }} ceph-authtool -C /etc/ceph/{{ cluster }}.{{ item.name }}.keyring --name {{ item.name }} --add-key {{ item.key }} --cap mon \"{{ item.mon_cap|default('') }}\" --cap osd \"{{ item.osd_cap|default('') }}\" --cap mds \"{{ item.mds_cap|default('') }}\"" shell: "{{ docker_exec_cmd }} bash -c 'ceph-authtool -C /etc/ceph/{{ cluster }}.{{ item.name }}.keyring --name {{ item.name }} --add-key {{ item.key }} --cap mon \"{{ item.mon_cap|default('') }}\" --cap osd \"{{ item.osd_cap|default('') }}\" --cap mds \"{{ item.mds_cap|default('') }}\"'"
args: args:
creates: "/etc/ceph/{{ cluster }}.{{ item.name }}.keyring" creates: "/etc/ceph/{{ cluster }}.{{ item.name }}.keyring"
with_items: "{{ openstack_keys }}" with_items: "{{ openstack_keys }}"
@ -29,3 +29,23 @@
- "{{ openstack_keys }}" - "{{ openstack_keys }}"
- "{{ openstack_key_exist.results }}" - "{{ openstack_key_exist.results }}"
when: item.1.rc != 0 when: item.1.rc != 0
- name: fetch openstack key(s)
fetch:
src: "/etc/ceph/{{ cluster }}.{{ item.name }}.keyring"
dest: "{{ fetch_directory }}/{{ fsid }}/etc/ceph/{{ cluster }}.{{ item.name }}.keyring"
flat: yes
with_items: "{{ openstack_keys }}"
- name: copy to other mons the openstack key(s)
copy:
src: "{{ fetch_directory }}/{{ fsid }}/etc/ceph/{{ cluster }}.{{ item.1.name }}.keyring"
dest: "/etc/ceph/{{ cluster }}.{{ item.1.name }}.keyring"
with_nested:
- "{{ groups[mon_group_name] }}"
- "{{ openstack_keys }}"
delegate_to: "{{ item.0 }}"
when:
- cephx
- openstack_config
- item.0 != groups[mon_group_name] | last