#restapi_group_name: restapis
#rbdmirror_group_name: rbdmirrors
#client_group_name: clients
-#iscsi_gw_group_name: iscsi_gws
+#iscsi_gw_group_name: iscsi-gws
#mgr_group_name: mgrs
# If check_firewall is true, then ansible will try to determine if the
#restapi_group_name: restapis
#rbdmirror_group_name: rbdmirrors
#client_group_name: clients
-#iscsi_gw_group_name: iscsi_gws
+#iscsi_gw_group_name: iscsi-gws
#mgr_group_name: mgrs
# If check_firewall is true, then ansible will try to determine if the
igw_purge_type: all
hosts:
- - "{{ iscsi_gw_group_name|default('iscsi-gw') }}"
+ - "{{ iscsi_gw_group_name|default('iscsi-gws') }}"
gather_facts: false # already gathered previously
restapi_group_name: restapis
rbdmirror_group_name: rbdmirrors
client_group_name: clients
-iscsi_gw_group_name: iscsi_gws
+iscsi_gw_group_name: iscsi-gws
mgr_group_name: mgrs
# If check_firewall is true, then ansible will try to determine if the
---
-- name: (local) create ssl crt/key files
+- name: create ssl crt/key files
shell: |
openssl req -newkey rsa:2048 -nodes -keyout /etc/ceph/iscsi-gateway.key -x509 -days 365 -out /etc/ceph/iscsi-gateway.crt -subj "/C=US/ST=./L=./O=RedHat/OU=Linux/CN={{ ansible_hostname }}"
run_once: True
-- name: (local) create pem
+- name: create pem
shell: |
cat /etc/ceph/iscsi-gateway.crt /etc/ceph/iscsi-gateway.key > /etc/ceph/iscsi-gateway.pem
run_once: True
register: pem
-- name: (local) create public key from pem
+- name: create public key from pem
shell: |
openssl x509 -inform pem -in /etc/ceph/iscsi-gateway.pem -pubkey -noout > /etc/ceph/iscsi-gateway-pub.key
run_once: True
- rbdmirrors
- clients
- mgrs
- - iscsi_gws
+ - iscsi-gws
gather_facts: false
- ceph-config
- ceph-client
-- hosts: iscsi_gws
+- hosts: iscsi-gws
gather_facts: false
become: True
roles:
--- /dev/null
+---
+gateway_ip_list: 192.168.1.90
[rbdmirrors]
ceph-rbd-mirror0
-[iscsi_gws]
+[iscsi-gws]
ceph-iscsi-gw0 ceph_repository="dev"