We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent bff017e commit d6eb617Copy full SHA for d6eb617
1 file changed
ansible/gen-certificate.yaml
@@ -45,6 +45,7 @@
45
ansible.builtin.copy:
46
content: "{{ existing_cert_data }}"
47
dest: "{{ temp_cert_file.path }}"
48
+ mode: "0600"
49
when: existing_secret.resources | length > 0
50
51
- name: Get certificate expiry date
@@ -61,7 +62,7 @@
61
62
- name: Set fact to generate new certificate if expiring soon
63
ansible.builtin.set_fact:
64
need_new_cert: true
- when:
65
+ when:
66
- existing_secret.resources | length > 0
67
- days_until_expiry | int <= renewal_threshold_days
68
@@ -74,7 +75,7 @@
74
75
- name: Display certificate status
76
ansible.builtin.debug:
77
msg: >
- Certificate status:
78
+ Certificate status:
79
{% if existing_secret.resources | length == 0 %}
80
No existing certificate found. Will generate new certificate.
81
{% elif need_new_cert %}
0 commit comments