8c1e7061f8
Ceph can function just fine generating the keys before the pools have been created so we can apply the proper permissions to the auth string ahead of time. This allows us to not require additional steps to add a cache tier on the fly in the future. Change-Id: I8214c567fb7c337f95d908c5699d1da922bfa1a6 Closes-Bug: #1518475
34 lines
1.1 KiB
YAML
34 lines
1.1 KiB
YAML
---
|
|
- name: Ensuring config directory exists
|
|
file:
|
|
path: "{{ node_config_directory }}/glance-api"
|
|
state: "directory"
|
|
when: inventory_hostname in groups['glance-api']
|
|
|
|
- name: Copying over config(s)
|
|
template:
|
|
src: roles/ceph/templates/ceph.conf.j2
|
|
dest: "{{ node_config_directory }}/glance-api/ceph.conf"
|
|
when: inventory_hostname in groups['glance-api']
|
|
|
|
- include: ../../ceph_pools.yml
|
|
vars:
|
|
pool_name: "{{ glance_pool_name }}"
|
|
pool_type: "{{ glance_pool_type }}"
|
|
cache_mode: "{{ glance_cache_mode }}"
|
|
|
|
# TODO(SamYaple): Improve changed_when tests
|
|
- name: Pulling cephx keyring
|
|
command: docker exec ceph_mon ceph auth get-or-create client.glance mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rwx pool={{ ceph_glance_pool_name }}, allow rwx pool={{ ceph_glance_pool_name }}-cache'
|
|
register: cephx_key
|
|
delegate_to: "{{ groups['ceph-mon'][0] }}"
|
|
changed_when: False
|
|
run_once: True
|
|
|
|
- name: Pushing cephx keyring
|
|
copy:
|
|
content: "{{ cephx_key.stdout }}\n\r"
|
|
dest: "{{ node_config_directory }}/glance-api/ceph.client.glance.keyring"
|
|
mode: "0600"
|
|
when: inventory_hostname in groups['glance-api']
|