Skip to content

Commit ec062dd

Browse files
committed
Correct check for barbican approle secret id
1 parent 8508e4d commit ec062dd

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

etc/kayobe/ansible/vault-deploy-barbican.yml

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -85,12 +85,13 @@
8585
when: stackhpc_write_barbican_role_id_to_file | default(false) | bool
8686

8787
- name: Check if barbican Approle Secret ID is defined
88-
hashivault_approle_role_secret_list:
88+
hashivault_approle_role_secret_get:
8989
url: "{{ vault_api_addr }}"
9090
ca_cert: "{{ vault_ca_cert }}"
9191
token: "{{ vault_keys.root_token }}"
92+
secret: "{{ secrets_barbican_approle_secret_id }}"
9293
name: barbican
93-
register: barbican_approle_secret_list
94+
register: barbican_approle_secret_get
9495

9596
- name: Ensure barbican AppRole Secret ID is defined
9697
hashivault_approle_role_secret:
@@ -99,4 +100,4 @@
99100
token: "{{ vault_keys.root_token }}"
100101
secret: "{{ secrets_barbican_approle_secret_id }}"
101102
name: barbican
102-
when: barbican_approle_secret_list.secrets is match(secrets_barbican_approle_secret_id)
103+
when: barbican_approle_secret_get.status == "absent"

0 commit comments

Comments
 (0)