---
- name: Collect all the pools
  ansible.builtin.command: >
    {{ container_exec_cmd }} rados --cluster {{ cluster }} lspools
  changed_when: false
  register: ceph_pools
  check_mode: false

- name: Secure the cluster
  ansible.builtin.command: >
    {{ container_exec_cmd }} ceph --cluster {{ cluster }} osd pool set {{ item[0] }} {{ item[1] }} true
  changed_when: false
  with_nested:
    - "{{ ceph_pools.stdout_lines | default([]) }}"
    - "{{ secure_cluster_flags }}"