class profiles::ceph::mon (
  Boolean $members_lookup    = true,
  String  $members_role      = 'roles::infra::incus::node',
  String  $master            = 'prodnxsr0009.main.unkin.net',
){

  $admin_key = 'AQAN/iRooIyMCRAAynGdDgfEZX79YycRZcp6tw=='
  $mon_key = 'AQAa/iRo37CdIhAAERhnXqDVs1BaMcVVIBc3Ew=='
  $bootstrap_osd_key = 'AQAo/iRoZx0wFxAAhVVQ0BkfBpIeL6l1kdLBIw=='
  $fsid = 'FBDBD9F1-9606-42D2-9C93-0E9A73BBF2C2'

  # if lookup is enabled
  if $members_lookup {

    # check that the role is also set
    unless !($members_role == undef) {
      fail("members_role must be provided for ${title} when members_lookup is True")
    }

    # if it is, find hosts, sort them so they dont cause changes every run
    $servers_array = sort(query_nodes("enc_role='${members_role}' and region='${facts['region']}'", 'networking.hostname'))
    $servers_ip = sort(query_nodes("enc_role='${members_role}' and region='${facts['region']}'", 'networking.interfaces.loopback2.ip'))
  }

  if length($servers_array) >= 3 {

    $servers_hostname_string = join($servers_array, ',')
    $servers_ip_string = join($servers_ip, ',')

    class { 'ceph':
      fsid                => $fsid,
      mon_initial_members => $servers_hostname_string,
      mon_host            => $servers_ip_string,
      cluster_network     => '198.18.22.0/24',
      public_network      => '198.18.23.0/24',
      public_addr         => "%{hiera('networking_loopback2_ip')}",
    }

    ceph::mon { $facts['networking']['hostname']:
      key         => $mon_key,
      public_addr => $facts['networking']['interfaces']['loopback2']['ip'],
    }

    Ceph::Key {
      inject         => true,
      inject_as_id   => 'mon.',
      inject_keyring => "/var/lib/ceph/mon/ceph-${facts['networking']['hostname']}/keyring",
    }

    ceph::key { 'client.admin':
      secret  => $admin_key,
      cap_mon => 'allow *',
      cap_osd => 'allow *',
      cap_mds => 'allow',
    }

    ceph::key { 'client.bootstrap-osd':
      secret  => $bootstrap_osd_key,
      cap_mon => 'allow profile bootstrap-osd',
    }
  }
}