External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-02-26 23:46:05 -03:30
Code Issues Packages Projects Releases Wiki Activity

Make vault init more idempotent (#14664)

Browse Source 
Currently if you cleanup docker volume for vault and bring docker-compose development back up with vault enabled we will not initialize vault because the secret files still exist.

This change will attempt to initialize vault reguardless and update the secret file if vault is initialized
This commit is contained in:
Hao Liu
2023-11-16 09:43:45 -06:00
committed by GitHub
parent 1cfd51764e
commit ec364cc60e
1 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
tools/docker-compose/ansible/roles/vault/tasks/initialize.yml
View File

@@ -1,15 +1,11 @@
--- ---
- name: See if vault has been initialized
ansible.builtin.stat:
path: "{{ vault_file }}"
register: vault_secret_file_info
- block: - block:
- name: Start the vault - name: Start the vault
community.docker.docker_compose: community.docker.docker_compose:
state: present state: present
services: vault services: vault
project_src: "{{ sources_dest }}" project_src: "{{ sources_dest }}"
register: vault_start
- name: Run the initialization - name: Run the initialization
community.docker.docker_container_exec: community.docker.docker_container_exec:
@@ -18,6 +14,7 @@
env: env:
VAULT_ADDR: "http://127.0.0.1:1234" VAULT_ADDR: "http://127.0.0.1:1234"
register: vault_initialization register: vault_initialization
ignore_errors: true
- name: Write out initialization file - name: Write out initialization file
copy: copy:
@@ -30,6 +27,7 @@
{{ vault_initialization.stdout_lines[4] | regex_replace('Unseal Key ', 'Unseal_Key_') }} {{ vault_initialization.stdout_lines[4] | regex_replace('Unseal Key ', 'Unseal_Key_') }}
{{ vault_initialization.stdout_lines[6] | regex_replace('Initial Root Token', 'Initial_Root_Token') }} {{ vault_initialization.stdout_lines[6] | regex_replace('Initial Root Token', 'Initial_Root_Token') }}
dest: "{{ vault_file }}" dest: "{{ vault_file }}"
when: (vault_initialization.stdout_lines | length) > 0
- name: Unlock the vault - name: Unlock the vault
include_role: include_role:
@@ -58,5 +56,4 @@
community.docker.docker_compose: community.docker.docker_compose:
state: absent state: absent
project_src: "{{ sources_dest }}" project_src: "{{ sources_dest }}"
when: vault_start is defined and vault_start.changed
when: not vault_secret_file_info.stat.exists