From fc992cd0e8f7b6a68754674e313d9f2d77536162 Mon Sep 17 00:00:00 2001 From: Ian Wienand Date: Thu, 7 Oct 2021 11:38:02 +1100 Subject: [PATCH] letsencrypt: avoid running on handler changes Avoid running the letsencrypt job when other roles add handlers for their certificates. We don't need to run this job explicitly in that case. Change-Id: Ic2e9b7fc81b73ecf7af197b83496e3589bb28bb0 Co-Authored-By: Jeremy Stanley --- zuul.d/system-config-run.yaml | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/zuul.d/system-config-run.yaml b/zuul.d/system-config-run.yaml index bc4db9d60d..52722b21e2 100644 --- a/zuul.d/system-config-run.yaml +++ b/zuul.d/system-config-run.yaml @@ -204,7 +204,18 @@ files: - playbooks/install-ansible.yaml - inventory/service/group_vars/letsencrypt.yaml - - playbooks/roles/letsencrypt + # This is split because we ant to avoid + # ...create-certs/handlers/main.yaml matching since every + # letsencrypt user has its handler in there. re2 matching + # doesn't provide us a way to say "everything but this file" + - playbooks/roles/letsencrypt-acme-sh-install + - playbooks/roles/letsencrypt-config-certcheck + - playbooks/roles/letsencrypt-create-certs/defaults + - playbooks/roles/letsencrypt-create-certs/handlers/restart_apache.yaml + - playbooks/roles/letsencrypt-create-certs/handlers/touch_file.yaml + - playbooks/roles/letsencrypt-create-certs/tasks + - playbooks/roles/letsencrypt-install-txt-record + - playbooks/roles/letsencrypt-request-certs - job: name: system-config-run-lists