[cifmw_cephadm] add generic ceph-config override passthrough

roles/cifmw_cephadm/defaults/main.yml

@@ -54,6 +54,18 @@ cifmw_cephadm_certs: /etc/pki/tls
 cifmw_cephadm_debug: false
 cifmw_cephadm_min_compat_client: "mimic"
 cifmw_cephadm_auth_allowed_ciphers: ""
+# Extra `ceph config set` entries, applied after the built-in config so they
+# can also override earlier values. Each item maps to
+# `ceph config set <who> <key> <value>`, where `who` is the section or daemon
+# (global, mon, mgr, osd, mds, osd.0, ...) - the WHO column shown by
+# `ceph config dump`. Example - bound the MDS cap-revoke stall that wedges
+# manila-share on CephFS/NFS-Ganesha (evict a stale cap-holder before the
+# ~60s liveness kill):
+#   cifmw_cephadm_extra_config:
+#     - who: mds
+#       key: mds_cap_revoke_eviction_timeout
+#       value: "25"
+cifmw_cephadm_extra_config: []
 cifmw_cephadm_deployed_ceph: false
 cifmw_cephadm_backend: ''
 cifmw_cephadm_action: disable

roles/cifmw_cephadm/tasks/cephadm_config_set.yml

@@ -119,3 +119,16 @@
         {{ cifmw_cephadm_ceph_cli }} config set mgr mgr/cephadm/container_image_prometheus \
         {{ cifmw_cephadm_prometheus_container_image }}
       changed_when: false
+
+- name: Apply extra ceph config set entries
+  become: true
+  when:
+    - cifmw_cephadm_extra_config | default([]) | length > 0
+  ansible.builtin.command:
+    cmd: >-
+      {{ cifmw_cephadm_ceph_cli }} config set
+      {{ item.who }} {{ item.key }} {{ item.value }}
+  loop: "{{ cifmw_cephadm_extra_config }}"
+  loop_control:
+    label: "{{ item.who }}/{{ item.key }}={{ item.value }}"
+  changed_when: false