From ac20f9bd792ffe9cc978c8d2eb79c06a6c83338e Mon Sep 17 00:00:00 2001
From: James Kirsch <generalfuzz@gmail.com>
Date: Wed, 27 May 2020 16:16:16 -0700
Subject: [PATCH] Fix glance backend TLS configuration task

Fix glance configuration task to create the backend PEM only on hosts with
glance service enabled.

Change-Id: I641c51761a99828854aafcc1e7354d6932d86659
---
 ansible/roles/glance/tasks/config.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/ansible/roles/glance/tasks/config.yml b/ansible/roles/glance/tasks/config.yml
index 4d4240ecd5..bbeeac51d8 100644
--- a/ansible/roles/glance/tasks/config.yml
+++ b/ansible/roles/glance/tasks/config.yml
@@ -40,6 +40,8 @@
     - kolla_copy_ca_into_containers | bool or glance_enable_tls_backend | bool
 
 - name: Creating TLS backend PEM File
+  vars:
+    glance_tls_proxy: "{{ glance_services['glance-tls-proxy'] }}"
   assemble:
     src: "{{ node_config_directory }}/glance-tls-proxy/"
     dest: "{{ node_config_directory }}/glance-tls-proxy/glance-cert-and-key.pem"
@@ -48,7 +50,8 @@
     remote_src: true
   become: true
   when:
-    - glance_enable_tls_backend | bool
+    - glance_tls_proxy.enabled | bool
+    - glance_tls_proxy.host_in_groups | bool
 
 - name: Copying over config.json files for services
   template: