Don't fail when checking for FIPS
The check for FIPS in the proc filesystem causes the playbook to halt if the path doesn't exist. This shouldn't happen because the next task is the one that explains to the deployer that FIPS isn't enabled. This patch allows the playbook to keep running so the appropriate debug message can be printed. Closes-Bug: 1659001 Change-Id: I4023b8e85e61a8e9883045ef488c75e65790035a
This commit is contained in:
parent
dc8dc3dbf9
commit
b14056ee44
@ -72,6 +72,7 @@
|
||||
command: cat /proc/sys/crypto/fips_enabled
|
||||
register: fips_check
|
||||
changed_when: False
|
||||
failed_when: False
|
||||
check_mode: no
|
||||
when:
|
||||
- ansible_os_family | lower == 'redhat'
|
||||
@ -86,7 +87,7 @@
|
||||
when:
|
||||
- ansible_os_family | lower == 'redhat'
|
||||
- fips_check is defined
|
||||
- fips_check.stdout == '0'
|
||||
- fips_check.stdout != '1'
|
||||
tags:
|
||||
- high
|
||||
- misc
|
||||
|
Loading…
x
Reference in New Issue
Block a user