mirror of https://github.com/ceph/ceph-ansible.git
95 lines
3.6 KiB
YAML
95 lines
3.6 KiB
YAML
---
|
|
- name: include red hat based system related tasks
|
|
include_tasks: pre_requisite_non_container_red_hat.yml
|
|
when: ansible_os_family == 'RedHat'
|
|
|
|
- name: include debian based system related tasks
|
|
include_tasks: pre_requisite_non_container_debian.yml
|
|
when: ansible_os_family == 'Debian'
|
|
|
|
- name: install nfs rgw/cephfs gateway - suse
|
|
zypper:
|
|
name: "{{ item.name }}"
|
|
disable_gpg_check: yes
|
|
with_items:
|
|
- { name: 'nfs-ganesha-rgw', install: "{{ nfs_obj_gw }}" }
|
|
- { name: 'radosgw', install: "{{ nfs_obj_gw }}" }
|
|
- { name: 'nfs-ganesha-ceph', install: "{{ nfs_file_gw }}" }
|
|
when:
|
|
- (ceph_origin == 'repository' or ceph_origin == 'distro')
|
|
- ceph_repository != 'rhcs'
|
|
- ansible_os_family == 'Suse'
|
|
- item.install | bool
|
|
register: result
|
|
until: result is succeeded
|
|
|
|
# NOTE (leseb): we use root:ceph for permissions since ganesha
|
|
# does not have the right selinux context to read ceph directories.
|
|
- name: create rados gateway and ganesha directories
|
|
file:
|
|
path: "{{ item.name }}"
|
|
state: directory
|
|
owner: "ceph"
|
|
group: "ceph"
|
|
mode: "{{ ceph_directories_mode | default('0755') }}"
|
|
with_items:
|
|
- { name: "/var/lib/ceph/bootstrap-rgw", create: "{{ nfs_obj_gw }}" }
|
|
- { name: "/var/lib/ceph/radosgw", create: "{{ nfs_obj_gw }}" }
|
|
- { name: "/var/lib/ceph/radosgw/{{ cluster }}-rgw.{{ ansible_hostname }}", create: "{{ nfs_obj_gw }}" }
|
|
- { name: "{{ rbd_client_admin_socket_path }}", create: "{{ nfs_obj_gw }}" }
|
|
- { name: "/var/log/ceph", create: true }
|
|
- { name: "/var/run/ceph", create: true }
|
|
when: item.create | bool
|
|
|
|
- name: cephx related tasks
|
|
when:
|
|
- cephx | bool
|
|
- groups.get(mon_group_name, []) | length > 0
|
|
block:
|
|
- name: get keys from monitors
|
|
command: "{{ container_exec_cmd }} ceph --cluster {{ cluster }} auth get {{ item.name }}"
|
|
register: _rgw_keys
|
|
with_items:
|
|
- { name: "client.bootstrap-rgw", path: "/var/lib/ceph/bootstrap-rgw/{{ cluster }}.keyring", copy_key: true }
|
|
- { name: "client.admin", path: "/etc/ceph/{{ cluster }}.client.admin.keyring", copy_key: "{{ copy_admin_key }}" }
|
|
delegate_to: "{{ groups.get(mon_group_name)[0] }}"
|
|
run_once: true
|
|
when:
|
|
- cephx | bool
|
|
- item.copy_key | bool
|
|
|
|
- name: copy ceph key(s) if needed
|
|
copy:
|
|
dest: "{{ item.item.path }}"
|
|
content: "{{ item.stdout + '\n' }}"
|
|
owner: "{{ ceph_uid if containerized_deployment else 'ceph' }}"
|
|
group: "{{ ceph_uid if containerized_deployment else 'ceph' }}"
|
|
mode: "{{ ceph_keyring_permissions }}"
|
|
with_items: "{{ _rgw_keys.results }}"
|
|
when:
|
|
- cephx | bool
|
|
- item.item.copy_key | bool
|
|
|
|
- name: nfs object gateway related tasks
|
|
when: nfs_obj_gw | bool
|
|
block:
|
|
- name: create rados gateway keyring
|
|
command: ceph --cluster {{ cluster }} --name client.bootstrap-rgw --keyring /var/lib/ceph/bootstrap-rgw/{{ cluster }}.keyring auth get-or-create client.rgw.{{ ansible_hostname }} osd 'allow rwx' mon 'allow rw' -o /var/lib/ceph/radosgw/{{ cluster }}-rgw.{{ ansible_hostname }}/keyring
|
|
args:
|
|
creates: /var/lib/ceph/radosgw/{{ cluster }}-rgw.{{ ansible_hostname }}/keyring
|
|
changed_when: false
|
|
|
|
- name: set rados gateway key permissions
|
|
file:
|
|
path: /var/lib/ceph/radosgw/{{ cluster }}-rgw.{{ ansible_hostname }}/keyring
|
|
owner: "ceph"
|
|
group: "ceph"
|
|
mode: "0600"
|
|
|
|
- name: change ownership on /var/log/ganesha
|
|
file:
|
|
path: /var/log/ganesha
|
|
owner: "root"
|
|
group: "root"
|
|
mode: "0755"
|