From 91ca3d151085accc6aec7361991b56ec6b74f14f Mon Sep 17 00:00:00 2001
From: "Joshua M. Boniface" <joshua@boniface.me>
Date: Fri, 1 Sep 2023 15:42:28 -0400
Subject: [PATCH] Ensure insecure_global_id_reclaim is false

---
 roles/pvc/tasks/ceph/main.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/roles/pvc/tasks/ceph/main.yml b/roles/pvc/tasks/ceph/main.yml
index 55b3db2..00957eb 100644
--- a/roles/pvc/tasks/ceph/main.yml
+++ b/roles/pvc/tasks/ceph/main.yml
@@ -90,12 +90,17 @@
 
 - name: set msgr2 enabled
   command: ceph mon enable-msgr2
-  run_once: true
+  run_once: yes
   retries: 6
   delay: 5
   register: result
   until: result.rc == 0
 
+- name: set insecure_global_id_reclaim disabled
+  command: ceph config set mon auth_allow_insecure_global_id_reclaim false 
+  run_once: yes
+  ignore_errors: yes
+
 - name: create mgr auth keyring
   command: ceph auth get-or-create mgr.{{ ansible_hostname }} mon 'allow profile mgr' osd 'allow *' mds 'allow *' --out-file /var/lib/ceph/mgr/ceph-{{ ansible_hostname }}/keyring
   become_user: ceph