Remove unnecessary pki step in haproxy install
This step appears to be unnecessary and was left over from a time before the PKI role was called from within the HAProxy role. See https://review.opendev.org/c/openstack/openstack-ansible/+/788031/3..4/tests/roles/bootstrap-host/files/user_variables_pki.yml At present, the lack of a pki_dir variable in this step results in writes to '/etc/pki' which requires elevated privileges. Other than creating directories, the default variables do not result in any certificates being generated in this step. Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/811742/ Change-Id: Id4228b8a587c22583bd0f9253665dcf58db88a5a
This commit is contained in:
parent
464d7e5d36
commit
1c75669df4
@ -43,12 +43,6 @@
|
||||
- "item.when | bool"
|
||||
tags:
|
||||
- haproxy-config # this tag is present because the task is ONLY a config task
|
||||
- name: "Create haproxy certificates"
|
||||
include_role:
|
||||
name: pki
|
||||
tasks_from: main_certs.yml
|
||||
vars:
|
||||
pki_search_certificates_pattern: "pki_certificates_haproxy"
|
||||
roles:
|
||||
- role: "keepalived"
|
||||
when: haproxy_use_keepalived | bool
|
||||
|
Loading…
Reference in New Issue
Block a user