Skip to content

Commit b36cb7e

Browse files
committed
Add idempotency to approle secret id setting
1 parent 8df8696 commit b36cb7e

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

etc/kayobe/ansible/vault-deploy-barbican.yml

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -71,11 +71,20 @@
7171
debug:
7272
msg: "barbican role id is {{ barbican_role_id.id }}"
7373

74-
- name: Ensure Barbican AppRole secret id is defined
74+
- name: Check if barbican Approle Secret ID is defined
75+
hashivault_approle_role_secret_list:
76+
url: "{{ vault_api_addr }}"
77+
ca_cert: "{{ vault_ca_cert }}"
78+
token: "{{ vault_keys.root_token }}"
79+
name: barbican
80+
register: barbican_approle_secret_list
81+
82+
- name: Ensure barbican AppRole Secret ID is defined
7583
hashivault_approle_role_secret:
7684
url: "{{ vault_api_addr }}"
7785
ca_cert: "{{ vault_ca_cert }}"
7886
token: "{{ vault_keys.root_token }}"
7987
secret: "{{ secrets_barbican_approle_secret_id }}"
8088
name: barbican
81-
ignore_errors: True
89+
state: absent
90+
when: barbican_approle_secret_list.secrets is match(secrets_barbican_approle_secret_id)

0 commit comments

Comments
 (0)