From e16e89758cc9b91cb1dc9a061480881e19fb33fe Mon Sep 17 00:00:00 2001
From: Tristan Cacqueray <tdecacqu@redhat.com>
Date: Fri, 1 May 2020 13:39:56 +0000
Subject: [PATCH] use-buildset-registry: do not update ca when not necessary

This change skip the update ca task when the certificate
is not modified.

Change-Id: I77d6d8771197d027774223ff5c81ab7d737672fb
---
 roles/use-buildset-registry/tasks/main.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/use-buildset-registry/tasks/main.yaml b/roles/use-buildset-registry/tasks/main.yaml
index 9b578643a..7557dbf32 100644
--- a/roles/use-buildset-registry/tasks/main.yaml
+++ b/roles/use-buildset-registry/tasks/main.yaml
@@ -37,9 +37,11 @@
   copy:
     content: "{{ buildset_registry.cert }}"
     dest: "{{ ca_dir }}/buildset-registry.crt"
+  register: _tls_ca
 - name: Update CA certs
   command: "{{ ca_command }}"
   become: true
+  when: _tls_ca is changed
 
 # Update daemon config
 - name: Check if docker daemon configuration exists