Closed m-bull closed 3 months ago
Thanks @mnasiadka - updated the changelog and role docs. I'm not sure fetch_initial_keys
ever actually did anything, but we've deprecated it now anyway!
I took the liberty of rebasing this
Ideally needs a version bump in galaxy.yml
too
This module should never write to files because they always exist inside the cephadm container, which is ephemeral. This change removes all file-writing functions and references to keyrings.
This fixes the following failure:
Which is caused by
module.set_fs_attributes_if_different
running on the host when the keyring file is created in a previous step in an ephemeral cephadm container, and no longer exists.This fixes a long-standing idempotency issue, where ceph keys can be created but the module fails on subsequent invocations. A side-effect of this change: the ability to specify and generate a secret string has been removed, and users should rely on retrieving the secret key from the cluster directly by registering the output from
cephadm_key
tasks.