ceph
/
ceph-ansible
mirror of https://github.com/ceph/ceph-ansible.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1850 from fultonj/issue/1848 

Add option to create client keyring file but not import it
pull/1866/head
Sébastien Han 2017-09-07 13:51:11 +02:00 committed by GitHub
parent cf88c136f5 a57f61efd9
commit 27b3f9a7d4
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
roles/ceph-client/tasks/create_users_keys.yml
View File

@ -4,7 +4,9 @@
with_items: "{{ pools }}" with_items: "{{ pools }}"
changed_when: false changed_when: false
failed_when: false failed_when: false
when: pools | length > 0 when:
- pools | length > 0
- copy_admin_key
- name: create key(s) - name: create key(s)
shell: "ceph-authtool -C /etc/ceph/{{ cluster }}.{{ item.name }}.keyring --name {{ item.name }} --add-key {{ item.key }} --cap mon \"{{ item.mon_cap|default('') }}\" --cap osd \"{{ item.osd_cap|default('') }}\" --cap mds \"{{ item.mds_cap|default('') }}\"" shell: "ceph-authtool -C /etc/ceph/{{ cluster }}.{{ item.name }}.keyring --name {{ item.name }} --add-key {{ item.key }} --cap mon \"{{ item.mon_cap|default('') }}\" --cap osd \"{{ item.osd_cap|default('') }}\" --cap mds \"{{ item.mds_cap|default('') }}\""
@ -22,14 +24,19 @@
failed_when: false failed_when: false
with_items: "{{ keys }}" with_items: "{{ keys }}"
register: keys_exist register: keys_exist
when:
- copy_admin_key
- name: add key(s) to ceph - name: add key(s) to ceph
command: "ceph --cluster {{ cluster }} auth import -i /etc/ceph/{{ cluster }}.{{ item.0.name }}.keyring" command: "ceph --cluster {{ cluster }} auth import -i /etc/ceph/{{ cluster }}.{{ item.0.name }}.keyring"
changed_when: false changed_when: false
with_together: with_together:
- "{{ keys }}" - "{{ keys }}"
- "{{ keys_exist.results }}" - "{{ keys_exist.results | default([]) }}"
when: item.1.rc != 0 when:
- not item.1.get("skipped")
- copy_admin_key
- item.1.rc != 0
- name: setfacl for key(s) - name: setfacl for key(s)
acl: acl: