diff --git a/ansible/roles/ceph/tasks/deploy.yml b/ansible/roles/ceph/tasks/deploy.yml
index 869be9d419..d4c4a90911 100644
--- a/ansible/roles/ceph/tasks/deploy.yml
+++ b/ansible/roles/ceph/tasks/deploy.yml
@@ -7,6 +7,7 @@
   when: inventory_hostname in groups['ceph-mon']
 
 - include_tasks: distribute_keyrings.yml
+  when: kolla_action != "upgrade"
 
 - include_tasks: start_mons.yml
   when: inventory_hostname in groups['ceph-mon']
diff --git a/ansible/roles/ceph/tasks/distribute_keyrings.yml b/ansible/roles/ceph/tasks/distribute_keyrings.yml
index 418ac6b547..9327347c65 100644
--- a/ansible/roles/ceph/tasks/distribute_keyrings.yml
+++ b/ansible/roles/ceph/tasks/distribute_keyrings.yml
@@ -1,7 +1,7 @@
 ---
 - name: Fetching Ceph keyrings
   become: true
-  command: docker exec ceph_mon fetch_ceph_keys.py
+  command: docker exec ceph_mon /usr/bin/python{{ distro_python_version }} /usr/bin/fetch_ceph_keys.py
   register: ceph_files_json
   changed_when: (ceph_files_json.stdout | from_json).changed
   failed_when: (ceph_files_json.stdout | from_json).failed