From c6601fe21ba6a5f088be0600d95fabd938e88a6f Mon Sep 17 00:00:00 2001
From: ale <ale@incal.net>
Date: Thu, 8 Apr 2021 10:36:24 +0100
Subject: [PATCH] Fix check mode for float-util-public-ssl-cert
Fixes issue #99.
---
roles/float-util-public-ssl-cert/tasks/main.yml | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/roles/float-util-public-ssl-cert/tasks/main.yml b/roles/float-util-public-ssl-cert/tasks/main.yml
index 17ce902a..ca487026 100644
--- a/roles/float-util-public-ssl-cert/tasks/main.yml
+++ b/roles/float-util-public-ssl-cert/tasks/main.yml
@@ -21,9 +21,11 @@
creates: "/etc/credentials/public/{{ cn }}/fullchain.pem"
register: ssl_cert_selfsigned
+# Don't run the following task in check mode, since the file will not
+# have been created in that case.
- file:
path: "/etc/credentials/public/{{ cn }}/privkey.pem"
owner: root
group: public-credentials
mode: 0640
- when: ssl_cert_selfsigned.changed
+ when: "ssl_cert_selfsigned.changed and not ansible_check_mode"
--
GitLab