From f05092277150261c0cb802a2dba147ab1da038f9 Mon Sep 17 00:00:00 2001 From: Dmitriy Rabotyagov Date: Wed, 15 Sep 2021 17:52:29 +0300 Subject: [PATCH] Change pki_create_ca condition We have defaulted openstack_pki_authorities so condition if it is defined will always be true. The only way to override that behaviour by deployer is to define empty list of authorities (if none needs to be generated) Change-Id: Ic9cb5dd397724525c0a826dbad690052ec59ecc7 --- playbooks/certificate-authority.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/playbooks/certificate-authority.yml b/playbooks/certificate-authority.yml index 400f03927b..219c5636e4 100644 --- a/playbooks/certificate-authority.yml +++ b/playbooks/certificate-authority.yml @@ -24,5 +24,5 @@ tasks_from: main_ca.yml vars: pki_dir: "{{ openstack_pki_dir }}" - pki_create_ca: "{{ openstack_pki_authorities is defined | bool }}" + pki_create_ca: "{{ openstack_pki_authorities | default([]) | length > 0 }}" pki_authorities: "{{ openstack_pki_authorities }}"