mon: fetch initial keyring even when running rolling_update

otherwise, the task to copy mgr keyring fails during the rolling_update.

Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>

roles/ceph-mon/tasks/ceph_keys.yml

@@ -16,7 +16,8 @@
   delay: "{{ handler_health_mon_check_delay }}"
   changed_when: false
 
-- name: fetch ceph initial keys
+- block:
+  - name: fetch ceph initial keys
     ceph_key:
       state: fetch_initial_keys
       cluster: "{{ cluster }}"
@@ -27,10 +28,7 @@
       CEPH_CONTAINER_IMAGE: "{{ ceph_docker_registry + '/' + ceph_docker_image + ':' + ceph_docker_image_tag if containerized_deployment else None }}"
       CEPH_CONTAINER_BINARY: "{{ container_binary }}"
       CEPH_ROLLING_UPDATE: "{{ rolling_update }}"
-  when:
-    - cephx
 
-- block:
   - name: create ceph mgr keyring(s)
     ceph_key:
       name: "mgr.{{ hostvars[item]['ansible_hostname'] }}"
@@ -62,7 +60,6 @@
     delegate_to: "{{ groups[mon_group_name][0] }}"
   when:
     - cephx
-    - not rolling_update
 
 - name: copy keys to the ansible server
   fetch: