Flag sensitive execute and file resources
creates keyring
not_if { mon_secret }
notifies :create, 'ruby_block[save mon_secret]', :immediately
+ sensitive true if Chef::Resource::Execute.method_defined? :sensitive
end
+execute 'add bootstrap-osd key to keyring' do
+ command lazy { "ceph-authtool '#{keyring}' --name=client.bootstrap-osd --add-key='#{osd_secret}' --cap mon 'allow profile bootstrap-osd' --cap osd 'allow profile bootstrap-osd'" }
+ only_if { node['ceph']['encrypted_data_bags'] && osd_secret }
+end
+
ruby_block 'save mon_secret' do
block do
fetch = Mixlib::ShellOut.new("ceph-authtool '#{keyring}' --print-key --name=mon.")