Skip to content

Commit 44fd499

Browse files
committed
Prevent seal-status check fails when TLS is expired
If certificate of Vault API is expired, user needs to set ``vault_unseal_verify`` to False to avoid tasks failing. However, checking seal-status after unsealing still tries to verify the certificate. This fixes the issue by setting ``validate_certs`` option to also follow ``vault_unseal_verify``.
1 parent 103edc2 commit 44fd499

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

roles/vault_unseal/tasks/main.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@
2424
- name: Check if vault is sealed
2525
uri:
2626
url: "{{ vault_api_addr }}/v1/sys/seal-status"
27+
validate_certs: "{{ vault_unseal_verify | default(omit) }}"
2728
register: vault_seal_status
2829

2930
- name: Fail when vault is still sealed

0 commit comments

Comments
 (0)