From 0a89f88b8928cab5cd8ea2db8ae18b2146433133 Mon Sep 17 00:00:00 2001
From: Brad Beam <brad.beam@b-rad.info>
Date: Wed, 13 Sep 2017 03:38:11 +0000
Subject: [PATCH] Fixing condition where CA already exists
---
roles/vault/tasks/shared/gen_ca.yml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/roles/vault/tasks/shared/gen_ca.yml b/roles/vault/tasks/shared/gen_ca.yml
index 291f42734..654cc3ff3 100644
--- a/roles/vault/tasks/shared/gen_ca.yml
+++ b/roles/vault/tasks/shared/gen_ca.yml
@@ -12,6 +12,7 @@
method: POST
body_format: json
body: "{{ gen_ca_vault_options }}"
+ status_code: 200,204
register: vault_ca_gen
delegate_to: "{{ groups.vault|first }}"
run_once: true
@@ -21,9 +22,11 @@
content: "{{ hostvars[groups.vault|first]['vault_ca_gen']['json']['data']['certificate'] }}"
dest: "{{ gen_ca_cert_dir }}/ca.pem"
mode: 0644
+ when: vault_ca_gen.status == 200
- name: "bootstrap/gen_ca | Copy {{ gen_ca_mount_path }} root CA key locally"
copy:
content: "{{ hostvars[groups.vault|first]['vault_ca_gen']['json']['data']['private_key'] }}"
dest: "{{ gen_ca_cert_dir }}/ca-key.pem"
mode: 0640
+ when: vault_ca_gen.status == 200
--
GitLab