From 09fe4e2ebdfcff04311a9a0a89c5d72717e0ad30 Mon Sep 17 00:00:00 2001
From: Tadas Sutkaitis <tadas.sutkaitis@vexxhost.com>
Date: Thu, 20 Aug 2026 23:13:21 +0300
Subject: [PATCH] fix(ceph-provisioners): create deployment namespace (#4244)

Signed-off-by: Tadas Sutkaitis <tadas.sutkaitis@vexxhost.com>
Signed-off-by: Mohammed Naser <mnaser@vexxhost.com>
Co-authored-by: Mohammed Naser <mnaser@vexxhost.com>
(cherry picked from commit 43ff5441165285944f10e7c614e27222c312162f)
---
 ...ers-create-namespace-52bf4b8d56327393.yaml |  5 ++
 roles/ceph_provisioners/tasks/main.yml        | 50 +++++++++++--------
 2 files changed, 33 insertions(+), 22 deletions(-)
 create mode 100644 releasenotes/notes/ceph-provisioners-create-namespace-52bf4b8d56327393.yaml

diff --git a/releasenotes/notes/ceph-provisioners-create-namespace-52bf4b8d56327393.yaml b/releasenotes/notes/ceph-provisioners-create-namespace-52bf4b8d56327393.yaml
new file mode 100644
index 0000000000..aa006f2e29
--- /dev/null
+++ b/releasenotes/notes/ceph-provisioners-create-namespace-52bf4b8d56327393.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    The Ceph provisioners role now creates its configured deployment namespace
+    before creating Kubernetes resources.
diff --git a/roles/ceph_provisioners/tasks/main.yml b/roles/ceph_provisioners/tasks/main.yml
index 91fb4cf8fd..97d2ebf4cc 100644
--- a/roles/ceph_provisioners/tasks/main.yml
+++ b/roles/ceph_provisioners/tasks/main.yml
@@ -30,29 +30,35 @@
       }}
   loop: "{{ _ceph_mon_dump.stdout | from_json | community.general.json_query('mons[*].addr') | map('regex_replace', '(.*):(.*)', '\\1') }}"
 
-- name: Create Ceph service
+- name: Create Ceph namespace and service
+  run_once: true
   kubernetes.core.k8s:
     state: present
     definition:
-      apiVersion: v1
-      kind: Service
-      metadata:
-        name: ceph-mon
-        namespace: openstack
-        labels:
-          application: ceph
-      spec:
-        clusterIP: None
-        ports:
-          - name: mon
-            port: 6789
-            targetPort: 6789
-          - name: mon-msgr2
-            port: 3300
-            targetPort: 3300
-          - name: metrics
-            port: 9283
-            targetPort: 9283
+      - apiVersion: v1
+        kind: Namespace
+        metadata:
+          name: "{{ ceph_provisioners_helm_release_namespace }}"
+
+      - apiVersion: v1
+        kind: Service
+        metadata:
+          name: ceph-mon
+          namespace: "{{ ceph_provisioners_helm_release_namespace }}"
+          labels:
+            application: ceph
+        spec:
+          clusterIP: None
+          ports:
+            - name: mon
+              port: 6789
+              targetPort: 6789
+            - name: mon-msgr2
+              port: 3300
+              targetPort: 3300
+            - name: metrics
+              port: 9283
+              targetPort: 9283
 
 - name: Create Ceph endpoints
   kubernetes.core.k8s:
@@ -62,7 +68,7 @@
       kind: Endpoints
       metadata:
         name: ceph-mon
-        namespace: openstack
+        namespace: "{{ ceph_provisioners_helm_release_namespace }}"
         labels:
           application: ceph
       subsets:
@@ -99,7 +105,7 @@
       type: kubernetes.io/rbd
       metadata:
         name: pvc-ceph-client-key
-        namespace: openstack
+        namespace: "{{ ceph_provisioners_helm_release_namespace }}"
         labels:
           application: ceph
       stringData: