Fix file permissions

Author: mnasiadka

roles/cephadm/tasks/bootstrap.yml

@@ -1,13 +1,6 @@
 ---
 - name: Bootstrap cephadm
   block:
-  - name: Template out cluster.yml
-    template:
-      src: "templates/cluster.yml.j2"
-      dest: "/tmp/cephadm_cluster.yml"
-    become: true
-    run_once: True
-
   - name: Bootstrap cephadm
     vars:
       mon_ip: "{{ hostvars[inventory_hostname]['ansible_'~cephadm_public_interface].ipv4.address }}"
@@ -48,6 +41,9 @@
     template:
       src: "templates/cluster.yml.j2"
       dest: "/var/run/ceph/{{ cephadm_fsid }}/cephadm_cluster.yml"
+      owner: root
+      group: root
+      mode: 0644
     become: true
     run_once: True
 

roles/cephadm/tasks/osds.yml

@@ -12,6 +12,9 @@
     copy:
       content: "{{ cephadm_osd_spec | to_nice_yaml(indent=2) }}"
       dest: "/var/run/ceph/{{ cephadm_fsid }}/osd_spec.yml"
+      owner: root
+      group: root
+      mode: 0644
     when: cephadm_osd_spec | length > 0
     become: true
 

roles/cephadm/tasks/prereqs.yml

@@ -18,6 +18,9 @@
     file:
       path: /etc/ceph
       state: directory
+      owner: root
+      group: root
+      mode: 0755
     become: true
 
   - name: Check if /etc/ceph/ceph.conf exists
@@ -43,6 +46,9 @@
     copy:
       content: "{{ cephadm_ssh_key.public_key }}"
       dest: "{{ cephadm_ssh_public_key }}"
+      owner: root
+      group: root
+      mode: 0644
     become: true
     when: not cephadm_check_ceph_id.stat.exists
   delegate_to: "{{ groups['mons'][0] }}"
@@ -54,4 +60,3 @@
     state: present
     key: "{{ cephadm_ssh_key.public_key }}"
   become: true
-  when: not cephadm_check_ceph_id.stat.exists