---
# Copyright 2017, Logan Vig <logan2211@gmail.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- name: Importing ceph-rgw-keystone-setup playbook
  import_playbook: ceph-rgw-keystone-setup.yml
  when: (groups[rgw_group_name] is defined and groups[rgw_group_name] | length > 0) or (ceph_rgws | length > 0)

- name: Gather ceph-rgw facts
  hosts: ceph-rgw
  gather_facts: "{{ osa_gather_facts | default(True) }}"
  tags:
    - always

- name: Install ceph radosgw
  hosts: ceph-rgw
  gather_facts: false
  user: root
  vars_files:
    - "defaults/{{ install_method }}_install.yml"
  pre_tasks:

    - name: Importing ceph-server tasks
      import_tasks: common-tasks/ceph-server.yml

    - name: Gather ceph-mon facts
      action: setup
      delegate_to: "{{ item }}"
      delegate_facts: yes
      with_items: "{{ groups[mon_group_name] }}"
      when:
        - inventory_hostname == ansible_play_hosts[0]
      tags:
        - ceph-mon-facts
        - ceph-rgw

    - name: Create and install SSL certificates
      include_role:
        name: pki
        tasks_from: main_certs.yml
        apply:
          tags:
            - ceph-rgw-config
            - pki
      vars:
        pki_setup_host: "{{ ceph_rgw_pki_setup_host }}"
        pki_dir: "{{ ceph_rgw_pki_dir }}"
        pki_create_certificates: "{{ ceph_rgw_user_ssl_cert is not defined and ceph_rgw_user_ssl_key is not defined }}"
        pki_regen_cert: "{{ ceph_rgw_pki_regen_cert }}"
        pki_certificates: "{{ ceph_rgw_pki_certificates }}"
        pki_install_certificates: "{{ ceph_rgw_pki_install_certificates }}"
      when:
        - ceph_rgw_backend_ssl
      tags:
        - always

  roles:
    - role: ceph-defaults
      tags:
        - skip_ansible_lint
    - role: ceph-facts
      tags:
        - skip_ansible_lint
    - role: ceph-common
      tags:
        - skip_ansible_lint
    - role: ceph-handler
      tags:
        - skip_ansible_lint
    - role: ceph-config
      tags:
        - skip_ansible_lint
    - role: ceph-rgw
      tags:
        - skip_ansible_lint
    - role: "openstack.osa.system_crontab_coordination"
      tags:
        - "system-crontab-coordination"

  vars:
    is_metal: "{{ properties.is_metal|default(false) }}"
    radosgw_civetweb_port: "{{ radosgw_service_port }}"
  tags:
    - ceph-rgw