Only create the keytab secret if it does not exist yet

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2022-04-14 11:31:35 +02:00 · 2022-04-14 11:31:35 +02:00 · 4bd4158a6b
commit 4bd4158a6b
parent 9bb04c8713
1 changed files with 1 additions and 1 deletions
--- a/roles/openshift/keytab/tasks/main.yml
+++ b/roles/openshift/keytab/tasks/main.yml
@ -13,5 +13,5 @@
 - name: Call `oc create secret generic` on the copied file
  shell: oc -n {{app}} create secret generic {{secret_name}} --from-file={{key}}=/etc/openshift_apps/{{app}}/{{key}}.kt
  register: create_out
-  when: ocp4
+  when: ocp4 and not keytab_status.stat.exists
  failed_when: "create_out.rc != 0 and 'AlreadyExists' not in create_out.stderr"