openstack/tripleo-heat-templates
Code Issues Proposed changes

Merge "Assert container's ssl cert exists before upgrade."

Browse Source
This commit is contained in:
Zuul 2018-08-22 14:18:16 +00:00 committed by Gerrit Code Review
commit 1c1b6649e3
1 changed files with 8 additions and 0 deletions

8
puppet/services/haproxy-public-tls-inject.yaml

@ -180,11 +180,19 @@ outputs:
- name: set kolla_dir fact
set_fact: kolla_dir="/var/lib/kolla/config_files/src-tls"
- name: assert {{ kolla_dir }}{{ cert_path }} exists
stat:
path: "{{ kolla_dir }}{{cert_path}}"
register: kolla_cert_exists
- name: set certificate group on host via container
command: docker exec {{container_id.stdout}} chgrp haproxy {{kolla_dir}}{{cert_path}}
when: kolla_cert_exists.stat.exists
- name: copy certificate from kolla directory to final location
command: docker exec {{container_id.stdout}} cp {{kolla_dir}}{{cert_path}} {{cert_path}}
when: kolla_cert_exists.stat.exists
- name: send restart order to haproxy container
command: docker kill --signal=HUP {{container_id.stdout}}
when: kolla_cert_exists.stat.exists