diff --git a/roles/ceph-dashboard/tasks/configure_dashboard.yml b/roles/ceph-dashboard/tasks/configure_dashboard.yml index 25389a950..7084ced45 100644 --- a/roles/ceph-dashboard/tasks/configure_dashboard.yml +++ b/roles/ceph-dashboard/tasks/configure_dashboard.yml @@ -180,6 +180,25 @@ - dashboard_rgw_api_no_ssl_verify | bool - radosgw_frontend_ssl_certificate | length > 0 +- name: dashboard iscsi management + when: groups.get(iscsi_gw_group_name, []) | length > 0 + block: + - name: disable iscsi api ssl verification + command: "{{ container_exec_cmd }} ceph --cluster {{ cluster }} dashboard set-iscsi-api-ssl-verification false" + changed_when: false + delegate_to: "{{ groups[mon_group_name][0] }}" + run_once: true + when: + - api_secure | default(false) | bool + - generate_crt | default(false) | bool + + - name: add iscsi gateways + command: "{{ container_exec_cmd }} ceph --cluster {{ cluster }} dashboard iscsi-gateway-add {{ 'https' if hostvars[item]['api_secure'] | default(false) | bool else 'http' }}://{{ hostvars[item]['api_user'] | default('admin') }}:{{ hostvars[item]['api_password'] | default('admin') }}@{{ hostvars[item]['ansible_default_ipv4']['address'] }}:{{ hostvars[item]['api_port'] | default(5000) }}" + changed_when: false + delegate_to: "{{ groups[mon_group_name][0] }}" + with_items: "{{ groups[iscsi_gw_group_name] }}" + run_once: true + - name: inject grafana dashboard layouts command: "{{ container_exec_cmd }} ceph --cluster {{ cluster }} dashboard grafana dashboards update" delegate_to: "{{ groups[mon_group_name][0] }}" diff --git a/roles/ceph-iscsi-gw/tasks/common.yml b/roles/ceph-iscsi-gw/tasks/common.yml index 93c8ba9b0..c531a6db9 100644 --- a/roles/ceph-iscsi-gw/tasks/common.yml +++ b/roles/ceph-iscsi-gw/tasks/common.yml @@ -22,6 +22,12 @@ - cephx | bool - item.item.copy_key | bool +- name: add mgr ip address to trusted list with dashboard + set_fact: + trusted_ip_list: '{{ trusted_ip_list }},{{ hostvars[item]["ansible_all_ipv4_addresses"] | ips_in_ranges(public_network.split(",")) | first }}' + with_items: '{{ groups[mgr_group_name] | default(groups[mon_group_name]) }}' + when: dashboard_enabled | bool + - name: deploy gateway settings, used by the ceph_iscsi_config modules config_template: src: "{{ role_path }}/templates/iscsi-gateway.cfg.j2"