openstack/kolla-ansible
Code Issues Proposed changes

Add precheck for haproxy certificate file

Browse Source 
If user enables TLS it also is necessary to create
a certificate. This precheck ensures the certificate
file exists before starting deployment.

Change-Id: I772d52e228ed012b9f8ccb5b616f9b188d3d340c
Closes-Bug: #1765677
This commit is contained in:
Vladislav Belogrudov 2018-04-20 14:21:21 +03:00
parent c6967c8b1f
commit ecafeb62d5
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
ansible/roles/haproxy/tasks/precheck.yml
View File

@ -37,6 +37,20 @@
check_mode: no
run_once: true
- name: Checking if haproxy certificate exists
run_once: true
local_action: stat path={{ kolla_external_fqdn_cert }}
register: haproxy_cert_file
changed_when: false
when: kolla_enable_tls_external | bool
- name: Fail if haproxy certificate is absent
run_once: true
local_action: fail msg="haproxy certificate file is not found. Ensure it exists as {{ kolla_external_fqdn_cert }}"
when:
- kolla_enable_tls_external | bool
- haproxy_cert_file.stat.exists == false
- name: Checking the kolla_external_vip_interface is present
fail: "msg='Please check the kolla_external_vip_interface property - interface {{ kolla_external_vip_interface }} not found'"
when: