Add CephAdmVerbose variable

The final step of the cephadm playbook calls post.yaml, which is able
to print the status of the cluster and export it as a ceph compatible
spec retrieved from the Ceph cluster. However, in a tls-everywhere
context, we should be able to stop logging the spec as it contains
sensitive info (the priv key).
This change just adds the CephAdmVerbose tht varibale to control what
is printed. The variable is set to true in both Ceph related scenarios
tested in the tripleo-ci.

Depends-On: I7bef5922d75114e4bd1924b52a382e61d7027d2d
Change-Id: I1db48dcc004223b90c3505bd447530593be487bf
This commit is contained in:
Francesco Pantano 2021-12-17 11:24:07 +01:00
parent 842036f987
commit fabfdc83de
3 changed files with 9 additions and 0 deletions

View File

@ -178,6 +178,7 @@ parameter_defaults:
- tty5
- tty6
ContainerCli: podman
CephAdmVerbose: true
CephConfigOverrides:
anotherkey: anothervalue
global:

View File

@ -37,6 +37,7 @@ parameter_defaults:
CephPoolDefaultSize: 1
CephEnableDashboard: false
CephDashboardPort: 8445
CephAdmVerbose: true
GrafanaDashboardPort: 3200
CephClusterFSID: '4b5c8c0a-ff60-454b-a1b4-9747aa737d19'
CephClientKey: 'AQC+vYNXgDAgAhAAc8UoYt+OTz5uhV7ItLdwUw=='

View File

@ -404,6 +404,12 @@ parameters:
description: |
If this parameter is true, then cephadm sets the debug related mgr
config-key and produces a more verbose output.
CephAdmVerbose:
type: boolean
default: false
description: |
If this parameter is true, the cephadm playbook is able to print
some ceph related information during its execution.
DeployedCeph:
default: false
type: boolean
@ -522,6 +528,7 @@ resources:
tripleo_cephadm_container_tag: {get_attr: [ContainerImageUrlParts, value, image_tag]}
tripleo_cephadm_crush_rules: {get_param: CephCrushRules}
tripleo_cephadm_debug: {get_param: CephAdmDebug}
tripleo_cephadm_verbose: {get_param: CephAdmVerbose}
tripleo_cephadm_rbd_trash: {get_param: CephRbdTrashPurgeInterval}
tripleo_cephadm_apply_ceph_conf_overrides_on_update: {get_param: ApplyCephConfigOverridesOnUpdate}
ceph_container_registry_auth: