From ecafeb62d59c0ee3a927f773f972f1afb8ccd72d Mon Sep 17 00:00:00 2001 From: Vladislav Belogrudov Date: Fri, 20 Apr 2018 14:21:21 +0300 Subject: [PATCH] Add precheck for haproxy certificate file If user enables TLS it also is necessary to create a certificate. This precheck ensures the certificate file exists before starting deployment. Change-Id: I772d52e228ed012b9f8ccb5b616f9b188d3d340c Closes-Bug: #1765677 --- ansible/roles/haproxy/tasks/precheck.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/ansible/roles/haproxy/tasks/precheck.yml b/ansible/roles/haproxy/tasks/precheck.yml index d5a085c978..717267f94c 100644 --- a/ansible/roles/haproxy/tasks/precheck.yml +++ b/ansible/roles/haproxy/tasks/precheck.yml @@ -37,6 +37,20 @@ check_mode: no run_once: true +- name: Checking if haproxy certificate exists + run_once: true + local_action: stat path={{ kolla_external_fqdn_cert }} + register: haproxy_cert_file + changed_when: false + when: kolla_enable_tls_external | bool + +- name: Fail if haproxy certificate is absent + run_once: true + local_action: fail msg="haproxy certificate file is not found. Ensure it exists as {{ kolla_external_fqdn_cert }}" + when: + - kolla_enable_tls_external | bool + - haproxy_cert_file.stat.exists == false + - name: Checking the kolla_external_vip_interface is present fail: "msg='Please check the kolla_external_vip_interface property - interface {{ kolla_external_vip_interface }} not found'" when: