openstack/tripleo-heat-templates
Code Issues Proposed changes

Exclude neutron haproxy containers when updating TLS certificates

Browse Source 
The current implementation using:

  command: "podman ps -q -f name=haproxy"

would return any container containing haproxy in the name, this
includes neutron-spawned containers named neutron-haproxy-qdhcp-XXX
that we probably want to exclude from this logic.

Change-Id: Ia956add9633fa558f514edd75d235c2cad1912d1
This commit is contained in:
Luca Miccini 2023-08-04 12:21:22 +02:00
parent 2d08c3047c
commit e63d6336e5
1 changed files with 1 additions and 1 deletions

2
deployment/haproxy/haproxy-public-tls-inject.yaml

@ -106,7 +106,7 @@ outputs:
- docker_state.status.ActiveState == 'active' or container_cli == 'podman'
- attr_cert_path.stat.exists
- attr_cert_path.stat.isdir == False
command: "{{ container_cli }} ps -q -f name=haproxy"
command: "{{ container_cli }} ps -q -f name='^haproxy(-bundle)?'"
register: container_id
- name: get pcs resource name for haproxy container