Don't fail when checking for FIPS

The check for FIPS in the proc filesystem causes the playbook to halt
if the path doesn't exist. This shouldn't happen because the next
task is the one that explains to the deployer that FIPS isn't enabled.

This patch allows the playbook to keep running so the appropriate
debug message can be printed.

Closes-Bug: 1659001
Change-Id: I4023b8e85e61a8e9883045ef488c75e65790035a
This commit is contained in:
Major Hayden 2017-01-24 10:03:48 -06:00
parent dc8dc3dbf9
commit b14056ee44
1 changed files with 2 additions and 1 deletions

View File

@ -72,6 +72,7 @@
command: cat /proc/sys/crypto/fips_enabled
register: fips_check
changed_when: False
failed_when: False
check_mode: no
when:
- ansible_os_family | lower == 'redhat'
@ -86,7 +87,7 @@
when:
- ansible_os_family | lower == 'redhat'
- fips_check is defined
- fips_check.stdout == '0'
- fips_check.stdout != '1'
tags:
- high
- misc