mirror of https://github.com/ceph/ceph-ansible.git
43 lines
1.5 KiB
YAML
43 lines
1.5 KiB
YAML
---
|
|
- name: generate monitor initial keyring
|
|
local_action: >
|
|
shell python -c "import os ; import struct ; import time; import base64 ; key = os.urandom(16) ; header = struct.pack('<hiih',1,int(time.time()),0,len(key)) ; print base64.b64encode(header + key)" | tee fetch/monitor_keyring.conf
|
|
creates=fetch/monitor_keyring.conf
|
|
register: monitor_keyring
|
|
sudo: false
|
|
when: monitor_secret != 'AQAWqilTCDh7CBAAawXt6kyTgLFCxSvJhTEmuw=='
|
|
|
|
- name: read monitor initial keyring if it already exists
|
|
local_action: >
|
|
command cat fetch/monitor_keyring.conf
|
|
removes=fetch/monitor_keyring.conf
|
|
changed_when: false
|
|
register: monitor_keyring
|
|
sudo: false
|
|
when: monitor_secret != 'AQAWqilTCDh7CBAAawXt6kyTgLFCxSvJhTEmuw=='
|
|
|
|
- name: create monitor initial keyring
|
|
command: >
|
|
ceph-authtool /var/lib/ceph/tmp/keyring.mon.{{ ansible_hostname }} --create-keyring --name=mon. --add-key={{ monitor_secret }} --cap mon 'allow *'
|
|
creates=/var/lib/ceph/tmp/keyring.mon.{{ ansible_hostname }}
|
|
|
|
- name: set initial monitor key permissions
|
|
file: >
|
|
path=/var/lib/ceph/tmp/keyring.mon.{{ ansible_hostname }}
|
|
mode=0600
|
|
owner=root
|
|
group=root
|
|
|
|
- name: create monitor directory
|
|
file: >
|
|
path=/var/lib/ceph/mon/ceph-{{ ansible_hostname }}
|
|
state=directory
|
|
owner=root
|
|
group=root
|
|
mode=0755
|
|
|
|
- name: ceph monitor mkfs
|
|
command: >
|
|
ceph-mon --mkfs -i {{ ansible_hostname }} --fsid {{ fsid }} --keyring /var/lib/ceph/tmp/keyring.mon.{{ ansible_hostname }}
|
|
creates=/var/lib/ceph/mon/ceph-{{ ansible_hostname }}/keyring
|