# Rados Gateway options\r
# referenced in common role too.\r
radosgw: false\r
+\r
+###########\r
+# OPENSTACK\r
+###########\r
+\r
+openstack_config: false\r
+openstack_glance_pool: images\r
+openstack_cinder_pool: volumes\r
+openstack_nova_pool: vms\r
+openstack_cinder_backup_pool: backups\r
+\r
+openstack_keys:\r
+ - { name: client.glance, value: "mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rwx pool={{ openstack_glance_pool }}'" }\r
+ - { name: client.cinder, value: "mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rwx pool={{ openstack_cinder_pool }}, allow rwx pool={{ openstack_nova_pool }}, allow rx pool={{ openstack_glance_pool }}'" }\r
+ - { name: client.cinder-backup, value: "mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rwx pool={{ openstack_cinder_backup_pool }}'" }\r
--- /dev/null
+---
+
+- name: Create OpenStack pool
+ command: rados mkpool {{ item }}
+ with_items:
+ - "{{ openstack_glance_pool }}"
+ - "{{ openstack_cinder_pool }}"
+ - "{{ openstack_nova_pool }}"
+ - "{{ openstack_cinder_backup_pool }}"
+
+- name: Create OpenStack keys
+ command: ceph auth get-or-create {{ item.name }} {{ item.value }} -o /etc/ceph/ceph.client.{{ item.name }}.keyring creates=/etc/ceph/ceph.client.{{ item.name }}.keyring
+ with_items: openstack_keys