\r
#fetch_directory: fetch/\r
\r
+# Even though MDS nodes should not have the admin key\r
+# at their disposal, some people might want to have it\r
+# distributed on MDS nodes. Setting 'copy_admin_key' to 'true'\r
+# will copy the admin key to the /etc/ceph/ directory\r
+# copy_admin_key: false\r
\r
##########\r
# DOCKER #\r
#fetch_directory: fetch/
+# Even though OSD nodes should not have the admin key
+# at their disposal, some people might want to have it
+# distributed on OSD nodes. Setting 'copy_admin_key' to 'true'
+# will copy the admin key to the /etc/ceph/ directory
+#copy_admin_key: false
+
####################
# OSD CRUSH LOCATION
####################
#\r
#cephx: true\r
\r
+# Even though RGW nodes should not have the admin key\r
+# at their disposal, some people might want to have it\r
+# distributed on RGW nodes. Setting 'copy_admin_key' to 'true'\r
+# will copy the admin key to the /etc/ceph/ directory\r
+# copy_admin_key: false\r
+\r
# Used for the sudo exception while starting the radosgw process\r
# a new entry /etc/sudoers.d/ceph will be created\r
# allowing root to not require tty\r
- name: copy mds bootstrap key
copy:
src: "{{ fetch_directory }}/{{ fsid }}{{ item.name }}"
- dest: "{{ item }}"
+ dest: "{{ item.name }}"
owner: "{{ key_owner }}"
group: "{{ key_group }}"
mode: "{{ key_mode }}"
with_items:
- - { name: /var/lib/ceph/bootstrap-mds/ceph.keyring, copy: true }
- - { name: /etc/ceph/client.admin.keyring, "{{ copy_admin_key }}" }
+ - { name: /var/lib/ceph/bootstrap-mds/ceph.keyring, copy_key: true }
+ - { name: /etc/ceph/ceph.client.admin.keyring, copy_key: "{{ copy_admin_key }}" }
when:
cephx and
- item.copy is true
+ item.copy_key|bool
- name: create mds directory
file:
- name: copy osd bootstrap key
copy:
src: "{{ fetch_directory }}/{{ fsid }}{{ item.name }}"
- dest: "{{ item }}"
+ dest: "{{ item.name }}"
owner: "{{ key_owner }}"
group: "{{ key_group }}"
mode: "{{ key_mode }}"
with_items:
- - { name: /var/lib/ceph/bootstrap-osd/ceph.keyring, copy: true }
- - { name: /etc/ceph/client.admin.keyring, "{{ copy_admin_key }}" }
+ - { name: /var/lib/ceph/bootstrap-osd/ceph.keyring, copy_key: true }
+ - { name: /etc/ceph/ceph.client.admin.keyring, copy_key: "{{ copy_admin_key }}" }
when:
cephx and
- item.copy is true
+ item.copy_key|bool
- name: copy rados gateway bootstrap key
copy:
src: "{{ fetch_directory }}/{{ fsid }}{{ item.name }}"
- dest: "{{ item }}"
+ dest: "{{ item.name }}"
owner: "{{ key_owner }}"
group: "{{ key_group }}"
mode: "{{ key_mode }}"
with_items:
- - { name: /var/lib/ceph/bootstrap-rgw/ceph.keyring, copy: true }
- - { name: /etc/ceph/client.admin.keyring, "{{ copy_admin_key }}" }
+ - { name: /var/lib/ceph/bootstrap-rgw/ceph.keyring, copy_key: true }
+ - { name: /etc/ceph/ceph.client.admin.keyring, copy_key: "{{ copy_admin_key }}" }
when:
cephx and
- item.copy is true
+ item.copy_key|bool
- name: create rados gateway keyring
command: ceph --cluster ceph --name client.bootstrap-rgw --keyring /var/lib/ceph/bootstrap-rgw/ceph.keyring auth get-or-create client.rgw.{{ ansible_hostname }} osd 'allow rwx' mon 'allow rw' -o /var/lib/ceph/radosgw/ceph-rgw.{{ ansible_hostname }}/keyring