openstack/tripleo-heat-templates
Code Issues Proposed changes

Exclude neutron haproxy containers when updating TLS certificates

Browse Source 
The current implementation using:

  command: "podman ps -q -f name=haproxy"

would return any container containing haproxy in the name, this
includes neutron-spawned containers named neutron-haproxy-qdhcp-XXX
that we probably want to exclude from this logic.

Change-Id: Ia956add9633fa558f514edd75d235c2cad1912d1
(cherry picked from commit e63d6336e585c8004edd91d4154b08f8ed7b5c37)
This commit is contained in:
Luca Miccini 2023-08-04 12:21:22 +02:00
parent 1e50df9419
commit 9adcac636e
1 changed files with 1 additions and 1 deletions

2
deployment/haproxy/haproxy-public-tls-inject.yaml

@ -109,7 +109,7 @@ outputs:
- docker_state.status.ActiveState == 'active' or container_cli == 'podman'
- attr_cert_path.stat.exists
- attr_cert_path.stat.isdir == False
command: "{{ container_cli }} ps -q -f name=haproxy"
command: "{{ container_cli }} ps -q -f name='^haproxy(-bundle)?'"
register: container_id
- name: get pcs resource name for haproxy container