From 03e59aa981910ed7a1a5ceee48f7daab67499ca1 Mon Sep 17 00:00:00 2001 From: Ian Wienand Date: Thu, 12 Jan 2023 15:58:12 +1100 Subject: [PATCH] infra-prod: don't encrypt logs if they are being published If this flag is set, the logs are copied into the published job. There's no need to save an encrypted copy of the same thing. Change-Id: I32ac5e0ac4d2307f2e1df88c5e2ccbe2fd381839 --- playbooks/zuul/run-production-playbook-post.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/playbooks/zuul/run-production-playbook-post.yaml b/playbooks/zuul/run-production-playbook-post.yaml index 4c563784ad..137c93afd9 100644 --- a/playbooks/zuul/run-production-playbook-post.yaml +++ b/playbooks/zuul/run-production-playbook-post.yaml @@ -5,7 +5,9 @@ - hosts: prod_bastion[0] tasks: - name: Encrypt log - when: infra_prod_playbook_encrypt_log|default(False) + when: > + infra_prod_playbook_encrypt_log|default(False) and + (not infra_prod_playbook_collect_log) block: - name: Create temporary staging area for encrypted logs