Set FQDN to nodes

basics.yaml

@@ -67,6 +67,11 @@
       notify:
         - ceph-rollout:restart_sshd
 
+    - name: set up DNS
+      lineinfile:
+        path: /etc/resolv.conf
+        search_string: 'nameserver 10.50.4.8'
+        line: "{{ DNS_address }}"
 
     - name: set root password
       user:

grafana.yaml

@@ -0,0 +1,3 @@
+service_type: grafana
+spec:
+  initial_admin_password: qweqwe

inv.yaml

@@ -1,22 +1,22 @@
 ceph-nodes:
   hosts:
-    node01.brbd.ceph.szfo:
+    node01.gprs.ceph.ufo:
       ansible_host: 10.50.8.75
       ansible_user: g10
       ansible_ssh_pass: 12345
       ansible_become_pass: 12345
-    node02.brbd.ceph.szfo:
+    node02.gprs.ceph.ufo:
       ansible_host: 10.50.8.76
       ansible_user: g10
       ansible_ssh_pass: 12345
       ansible_become_pass: 12345
-    node03.brbd.ceph.szfo:
+    node03.gprs.ceph.ufo:
       ansible_host: 10.50.8.77
       ansible_user: g10
       ansible_ssh_pass: 12345
       ansible_become_pass: 12345
-    ceph-client:
+#    ceph-client:
-      ansible_host: 10.50.8.91
+#      ansible_host: 10.50.8.91
-      ansible_user: g10
+#      ansible_user: g10
-      ansible_ssh_pass: 12345
+#      ansible_ssh_pass: 12345
-      ansible_become_pass: 12345
+#      ansible_become_pass: 12345

pre-deploy.yml

@@ -12,13 +12,14 @@
     grafana_tag: "9.4.12"
     alertmanager_tag: "v0.27.0"
     ntp_server: "ntp.int.nt-com.ru"
-    first_mon_ip: "10.50.8.88"
+    first_mon_ip: "10.50.8.75"
 #    cluster_network: "10.63.0.0/24"
     public_network: "10.50.8.0/24"
     CEPH_RELEASE: '19.2.0'
     initial_dashboard_user: 'admin'
     initial_dashboard_password: 'qweqwe'
     allow_fqdn_hostname: 'true'
+    DNS_address: "10.50.8.51"
   tasks:
     - name: basic setups
       import_tasks:

templates/sshd_config.j2

@@ -53,8 +53,9 @@ PermitRootLogin yes
 #IgnoreRhosts yes
 
 # To disable tunneled clear text passwords, change to no here!
-#PasswordAuthentication yes
+PasswordAuthentication yes
 #PermitEmptyPasswords no
+PermitRootLogin yes
 
 # Change to yes to enable challenge-response passwords (beware issues with
 # some PAM modules and threads)