mirror of https://github.com/ceph/ceph-ansible.git
81 lines
3.1 KiB
YAML
81 lines
3.1 KiB
YAML
---
|
|
- name: waiting for the monitor(s) to form the quorum...
|
|
command: >
|
|
{{ docker_exec_cmd }}
|
|
ceph
|
|
--cluster {{ cluster }}
|
|
-n mon.
|
|
-k /var/lib/ceph/mon/{{ cluster }}-{{ ansible_hostname }}/keyring
|
|
mon_status
|
|
--format json
|
|
register: ceph_health_raw
|
|
run_once: true
|
|
until: >
|
|
(ceph_health_raw.stdout | default('{}') | from_json)['state'] in ['leader', 'peon']
|
|
retries: "{{ handler_health_mon_check_retries }}"
|
|
delay: "{{ handler_health_mon_check_delay }}"
|
|
|
|
- name: fetch ceph initial keys
|
|
ceph_key:
|
|
state: fetch_initial_keys
|
|
cluster: "{{ cluster }}"
|
|
owner: "{{ ceph_uid if containerized_deployment else 'ceph' }}"
|
|
group: "{{ ceph_uid if containerized_deployment else 'ceph' }}"
|
|
mode: "0400"
|
|
environment:
|
|
CEPH_CONTAINER_IMAGE: "{{ ceph_docker_registry + '/' + ceph_docker_image + ':' + ceph_docker_image_tag if containerized_deployment else None }}"
|
|
CEPH_CONTAINER_BINARY: "{{ container_binary }}"
|
|
when:
|
|
- cephx
|
|
|
|
- block:
|
|
- name: create ceph mgr keyring(s)
|
|
ceph_key:
|
|
name: "mgr.{{ hostvars[item]['ansible_hostname'] }}"
|
|
state: present
|
|
caps:
|
|
mon: allow profile mgr
|
|
osd: allow *
|
|
mds: allow *
|
|
cluster: "{{ cluster }}"
|
|
secret: "{{ (mgr_secret != 'mgr_secret') | ternary(mgr_secret, omit) }}"
|
|
owner: "{{ ceph_uid if containerized_deployment else 'ceph' }}"
|
|
group: "{{ ceph_uid if containerized_deployment else 'ceph' }}"
|
|
mode: "0400"
|
|
environment:
|
|
CEPH_CONTAINER_IMAGE: "{{ ceph_docker_registry + '/' + ceph_docker_image + ':' + ceph_docker_image_tag if containerized_deployment else None }}"
|
|
CEPH_CONTAINER_BINARY: "{{ container_binary }}"
|
|
with_items:
|
|
- "{{ groups.get(mgr_group_name, []) }}" # this honors the condition where mgrs run on separate machines
|
|
- "{{ groups.get(mon_group_name, []) }}" # this honors the new rule where mgrs are always collocated with mons
|
|
|
|
- name: copy ceph mgr key(s) to the ansible server
|
|
fetch:
|
|
src: "{{ ceph_conf_key_directory }}/{{ cluster }}.mgr.{{ hostvars[item]['ansible_hostname'] }}.keyring"
|
|
dest: "{{ fetch_directory }}/{{ fsid }}/{{ ceph_conf_key_directory }}/{{ cluster }}.mgr.{{ hostvars[item]['ansible_hostname'] }}.keyring"
|
|
flat: yes
|
|
with_items:
|
|
- "{{ groups.get(mgr_group_name, []) }}"
|
|
when:
|
|
- groups.get(mgr_group_name, []) | length > 0
|
|
when:
|
|
- cephx
|
|
- not rolling_update
|
|
- inventory_hostname == groups[mon_group_name]|last # only on the last to avoid key creation collision
|
|
|
|
- name: copy keys to the ansible server
|
|
fetch:
|
|
src: "{{ item }}"
|
|
dest: "{{ fetch_directory }}/{{ fsid }}/{{ item }}"
|
|
flat: yes
|
|
with_items:
|
|
- /var/lib/ceph/bootstrap-osd/{{ cluster }}.keyring
|
|
- /var/lib/ceph/bootstrap-rgw/{{ cluster }}.keyring
|
|
- /var/lib/ceph/bootstrap-mds/{{ cluster }}.keyring
|
|
- /var/lib/ceph/bootstrap-rbd/{{ cluster }}.keyring
|
|
- /var/lib/ceph/bootstrap-rbd-mirror/{{ cluster }}.keyring
|
|
- /etc/ceph/{{ cluster }}.client.admin.keyring
|
|
when:
|
|
- cephx
|
|
- inventory_hostname == groups[mon_group_name] | last
|