Merge pull request #1213 from ceph/cephx-initial-mon

mon: only put mon initial key in mon kv when cephx is enabled

roles/ceph-mon/tasks/ceph_keys.yml

@@ -19,7 +19,9 @@
   changed_when: false
   always_run: true
   run_once: true
-  when: is_initial_mon_keyring_in_kv.rc != 0
+  when:
+    - is_initial_mon_keyring_in_kv.rc != 0
+    - cephx
 
 - name: create ceph rest api keyring when mon is not containerized
   command: ceph --cluster {{ cluster }} auth get-or-create client.restapi osd 'allow *' mon 'allow *' -o /etc/ceph/{{ cluster }}.client.restapi.keyring