Benoît Knecht 4a7186697e ceph-mon: Don't set monitor directory mode recursively ... After rolling updates performed with `infrastructure-playbooks/rolling_updates.yml`, files located in `/var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}` had mode 0755 (including the keyring), making them world-readable. This commit separates the task that configured permissions recursively on `/var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}` into two separate tasks: 1. Set the ownership and mode of the directory itself; 2. Recursively set ownership in the directory, but don't modify the mode. Signed-off-by: Benoît Knecht <bknecht@protonmail.ch> (cherry picked from commit 0d76826bbb)		2020-11-02 18:42:31 -05:00
..
ceph_keys.yml	Fix Ansible check mode for site.yml.sample playbook	2020-10-07 07:06:54 +02:00
deploy_monitors.yml	ceph-mon: Don't set monitor directory mode recursively	2020-11-02 18:42:31 -05:00
main.yml	ceph-handler: set handler on xxx_stat result	2020-09-29 16:33:08 +02:00
secure_cluster.yml	rename docker_exec_cmd variable	2019-05-17 16:05:58 +02:00
start_monitor.yml	container: isolate systemd tasks	2019-10-01 18:50:51 +02:00
systemd.yml	container: isolate systemd tasks	2019-10-01 18:50:51 +02:00