mirror of https://github.com/ceph/ceph-ansible.git
188 lines
5.5 KiB
YAML
188 lines
5.5 KiB
YAML
---
|
||
- name: get ceph version
|
||
command: ceph --version
|
||
changed_when: false
|
||
always_run: yes
|
||
register: ceph_version
|
||
|
||
- name: is ceph running already?
|
||
command: ceph --connect-timeout 3 --cluster {{ cluster }} fsid
|
||
changed_when: false
|
||
failed_when: false
|
||
always_run: yes
|
||
register: ceph_current_fsid
|
||
delegate_to: "{{ groups[mon_group_name][0] }}"
|
||
|
||
- name: create a local fetch directory if it does not exist
|
||
local_action: file path={{ fetch_directory }} state=directory
|
||
changed_when: false
|
||
become: false
|
||
run_once: true
|
||
when: cephx or generate_fsid
|
||
|
||
- set_fact:
|
||
fsid: "{{ ceph_current_fsid.stdout }}"
|
||
when: ceph_current_fsid.rc == 0
|
||
|
||
- set_fact:
|
||
monitor_name: "{{ ansible_hostname }}"
|
||
when: not mon_use_fqdn
|
||
|
||
- set_fact:
|
||
monitor_name: "{{ ansible_fqdn }}"
|
||
when: mon_use_fqdn
|
||
|
||
# We want this check to be run only on one mon
|
||
- name: check if {{ fetch_directory }} directory exists
|
||
local_action: stat path="{{ fetch_directory }}/monitor_keyring.conf"
|
||
register: monitor_keyring_conf
|
||
run_once: true
|
||
|
||
- block:
|
||
- name: check if /var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}/keyring already exists
|
||
stat:
|
||
path: /var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}/keyring
|
||
register: initial_mon_keyring
|
||
|
||
- name: fail if /var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}/keyring doesn't exist
|
||
fail:
|
||
msg: "/var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}/keyring not found"
|
||
when:
|
||
- not initial_mon_keyring.stat.exists
|
||
- ceph_current_fsid.rc == 0
|
||
|
||
- name: get existing initial mon keyring if it already exists but not monitor_keyring.conf in {{ fetch_directory }}
|
||
shell: |
|
||
grep key /var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}/keyring | sed 's/^.*= //'
|
||
register: monitor_keyring
|
||
when:
|
||
- not monitor_keyring_conf.stat.exists
|
||
- ceph_current_fsid.rc == 0
|
||
|
||
- name: test existing initial mon keyring
|
||
command: ceph --connect-timeout 3 --cluster {{ cluster }} --keyring /var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}/keyring -n mon. fsid
|
||
register: test_initial_monitor_keyring
|
||
ignore_errors: true
|
||
|
||
- name: fail if initial mon keyring found doesn't work
|
||
fail:
|
||
msg: "Initial mon keyring found doesn't work."
|
||
when: test_initial_monitor_keyring.rc != 0
|
||
|
||
- name: write initial mon keyring in {{ fetch_directory }}/monitor_keyring.conf if it doesn't exist
|
||
local_action: shell echo {{ monitor_keyring.stdout }} | tee {{ fetch_directory }}/monitor_keyring.conf
|
||
when:
|
||
- test_initial_monitor_keyring.rc == 0
|
||
|
||
- name: put initial mon keyring in mon kv store
|
||
command: ceph --cluster {{ cluster }} config-key put initial_mon_keyring {{ monitor_keyring.stdout }}
|
||
when: test_initial_monitor_keyring.rc == 0
|
||
run_once: true
|
||
when:
|
||
- not monitor_keyring_conf.stat.exists
|
||
- ceph_current_fsid.rc == 0
|
||
- mon_group_name in group_names
|
||
|
||
- set_fact:
|
||
ceph_version: "{{ ceph_version.stdout.split(' ')[2] }}"
|
||
|
||
# NOTE(mattt): On ansible 2.x we can use ansible_service_mgr instead
|
||
- name: check init system
|
||
slurp:
|
||
src: /proc/1/comm
|
||
always_run: yes
|
||
register: init_system
|
||
|
||
- set_fact:
|
||
init_system={{ init_system.content | b64decode | trim }}
|
||
|
||
- set_fact:
|
||
use_systemd={{ init_system.strip() == 'systemd' }}
|
||
|
||
- set_fact:
|
||
mds_name: "{{ ansible_hostname }}"
|
||
when: not mds_use_fqdn
|
||
|
||
- set_fact:
|
||
mds_name: "{{ ansible_fqdn }}"
|
||
when: mds_use_fqdn
|
||
|
||
- set_fact:
|
||
dir_owner: ceph
|
||
dir_group: ceph
|
||
dir_mode: "0755"
|
||
when: ceph_release_num.{{ ceph_release }} > ceph_release_num.hammer
|
||
|
||
- set_fact:
|
||
dir_owner: root
|
||
dir_group: root
|
||
dir_mode: "0755"
|
||
when: ceph_release_num.{{ ceph_release }} < ceph_release_num.infernalis
|
||
|
||
- set_fact:
|
||
key_owner: root
|
||
key_group: root
|
||
key_mode: "0600"
|
||
when: ceph_release_num.{{ ceph_release }} < ceph_release_num.infernalis
|
||
|
||
- set_fact:
|
||
key_owner: ceph
|
||
key_group: ceph
|
||
key_mode: "0600"
|
||
when: ceph_release_num.{{ ceph_release }} > ceph_release_num.hammer
|
||
|
||
- set_fact:
|
||
activate_file_owner: ceph
|
||
activate_file_group: ceph
|
||
activate_file_mode: "0644"
|
||
when: ceph_release_num.{{ ceph_release }} > ceph_release_num.hammer
|
||
|
||
- set_fact:
|
||
activate_file_owner: root
|
||
activate_file_group: root
|
||
activate_file_mode: "0644"
|
||
when: ceph_release_num.{{ ceph_release }} < ceph_release_num.infernalis
|
||
|
||
- set_fact:
|
||
rbd_client_directory_owner: root
|
||
when:
|
||
- ceph_release_num.{{ ceph_release }} < ceph_release_num.infernalis
|
||
- rbd_client_directory_owner is not defined
|
||
or not rbd_client_directory_owner
|
||
|
||
- set_fact:
|
||
rbd_client_directory_owner: ceph
|
||
when:
|
||
- ceph_release_num.{{ ceph_release }} > ceph_release_num.hammer
|
||
- rbd_client_directory_owner is not defined
|
||
or not rbd_client_directory_owner
|
||
|
||
- set_fact:
|
||
rbd_client_directory_group: root
|
||
when:
|
||
- ceph_release_num.{{ ceph_release }} < ceph_release_num.infernalis
|
||
- rbd_client_directory_group is not defined
|
||
or not rbd_client_directory_group
|
||
|
||
- set_fact:
|
||
rbd_client_directory_group: ceph
|
||
when:
|
||
- ceph_release_num.{{ ceph_release }} > ceph_release_num.hammer
|
||
- rbd_client_directory_group is not defined
|
||
or not rbd_client_directory_group
|
||
|
||
- set_fact:
|
||
rbd_client_directory_mode: "1777"
|
||
when:
|
||
- ceph_release_num.{{ ceph_release }} < ceph_release_num.infernalis
|
||
- rbd_client_directory_mode is not defined
|
||
or not rbd_client_directory_mode
|
||
|
||
- set_fact:
|
||
rbd_client_directory_mode: "0770"
|
||
when:
|
||
- ceph_release_num.{{ ceph_release }} > ceph_release_num.hammer
|
||
- rbd_client_directory_mode is not defined
|
||
or not rbd_client_directory_mode
|
||
|