diff --git a/ansible/roles/service-cert-copy/tasks/main.yml b/ansible/roles/service-cert-copy/tasks/main.yml index 27f5c20703..9b37fc92ee 100644 --- a/ansible/roles/service-cert-copy/tasks/main.yml +++ b/ansible/roles/service-cert-copy/tasks/main.yml @@ -24,6 +24,8 @@ dest: "{{ node_config_directory }}/{{ item.key }}/{{ project_name }}-cert.pem" mode: "0644" become: true + when: + - kolla_enable_tls_backend | bool with_dict: "{{ project_services | select_services_enabled_and_mapped_to_host }}" notify: - "Restart {{ item.key }} container" @@ -41,6 +43,8 @@ dest: "{{ node_config_directory }}/{{ item.key }}/{{ project_name }}-key.pem" mode: "0600" become: true + when: + - kolla_enable_tls_backend | bool with_dict: "{{ project_services | select_services_enabled_and_mapped_to_host }}" notify: - "Restart {{ item.key }} container" diff --git a/releasenotes/notes/bug-2080381-3cf5ed810a5ac690.yaml b/releasenotes/notes/bug-2080381-3cf5ed810a5ac690.yaml new file mode 100644 index 0000000000..d796b03565 --- /dev/null +++ b/releasenotes/notes/bug-2080381-3cf5ed810a5ac690.yaml @@ -0,0 +1,7 @@ +--- +fixes: + - | + Fixes an issue where backend-related certificates are + attempted to be copied when ``kolla_copy_ca_into_containers`` + is enabled but ``kolla_enable_tls_backend`` is disabled. + `LP#2080381 `__