def create_realm_zonegroup_zone(self, spec: RGWSpec, rgw_id: str):
        if utils.get_cluster_health(self.mgr) != 'HEALTH_OK':
            raise OrchestratorError('Health not ok, will try agin when health ok')

        #get keyring needed to run rados commands and strip out just the keyring
        keyring = self.get_keyring(rgw_id).split('key = ',1)[1].rstrip()

        # We can call radosgw-admin within the container, cause cephadm gives the MGR the required keyring permissions

        def get_realms() -> List[str]:
            cmd = ['radosgw-admin',
                   '--key=%s'%keyring,
                   '--user', 'rgw.%s'%rgw_id,
                   'realm', 'list',
                   '--format=json']
            result = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
            out = result.stdout
            if not out:
                return []
            try:
                j = json.loads(realms)
                return j.get('realms', [])
            except Exception as e:
                raise OrchestratorError('failed to parse realm info')

        def create_realm():
            cmd = ['radosgw-admin',
                   '--key=%s'%keyring,
                   '--user', 'rgw.%s'%rgw_id,
                   'realm', 'create',
                   '--rgw-realm=%s'%spec.rgw_realm,
                   '--default']
            result = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
            self.mgr.log.info('created realm: %s'%spec.rgw_realm)

        def get_zonegroups() -> List[str]:
            # get zonegroup
            cmd = ['radosgw-admin',
                   '--key=%s'%keyring,
                   '--user', 'rgw.%s'%rgw_id,
                   'zonegroup', 'list',
                   '--format=json']
            result = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
            out = result.stdout
            if not out:
                return []
            try:
                j = json.loads(result.stdout)
                return j.get('zonegroups', [])
            except Exception as e:
                raise OrchestratorError('failed to parse zonegroup info')

        def create_zonegroup():
            cmd = ['radosgw-admin',
                   '--key=%s'%keyring,
                   '--user', 'rgw.%s'%rgw_id,
                   'zonegroup', 'create',
                   '--rgw-zonegroup=default',
                   '--master', '--default']
            result = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
            self.mgr.log.info('created zonegroup: default')


        # create default zonegroup (will be used below if zone needs to be created)
        def create_zonegroup_if_requuired():
            zonegroups = get_zonegroups()
            if 'default' not in zonegroups:
                create_zonegroup()

        def get_zones() -> List[str]:
            cmd = ['radosgw-admin',
                   '--key=%s'%keyring,
                   '--user', 'rgw.%s'%rgw_id,
                   'zone', 'list',
                   '--format=json']
            result = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
            out = result.stdout
            if not out:
                return []
            try:
                j = json.loads(result.stdout)
                return j.get('zones', [])
            except Exception as e:
                raise OrchestratorError('failed to parse zone info')

        def create_zone():
            cmd = ['radosgw-admin',
                   '--key=%s'%keyring,
                   '--user', 'rgw.%s'%rgw_id,
                   'zone', 'create',
                   '--rgw-zonegroup=default',
                   '--rgw-zone=%s'%spec.rgw_zone,
                   '--master', '--default']
            result = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
            self.mgr.log.info('created zone: %s'%spec.rgw_zone)

        changes = False
        realms = get_realms()
        if spec.rgw_realm not in realms:
            create_realm()
            changes = True

        zones = get_zones()

        if spec.rgw_zone not in zones:
            create_zonegroup_if_requuired()
            create_zone()
            changes = True


        # update period if changes were made
        if changes:
            cmd = ['radosgw-admin',
                   '--key=%s'%keyring,
                   '--user', 'rgw.%s'%rgw_id,
                   'period', 'update',
                   '--rgw-realm=%s'%spec.rgw_realm,
                   '--commit']
            result = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)