You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
receptor_replace_tls is introduced by #39 and its default value is false, but I believe this should be true by default. Or in the first place, I think there is no need to allow this parameter to be changed. Keeping module default (true) and removing receptor_replace_tls should be better.
I assume the reason for the default value (false) is to avolid handler to be triggered every time by the task with ansible.builtin.copy with force: true, which results always changed.
However, force: true for the ansible.builtin.copy module does not break idempotency, as documented below.
This can cause problems with certificates not installing properly by following steps:
Deploy AWX
Add execution node and invoke install bundle
Delete AWX and receptor CA cert
Re-deploy AWX
Add the same exectution node and invoke install bundle
In this case, receptor CA has been changed, but install bundle does not replace CA since receptor_replace_tls is false by default. This causes the exec node to not be in ready state.
I thought about creating a PR to set receptor_replace_tls to true in group_vars in install bundle on the AWX side, but it didn't seem necessary to have receptor_replace_tls: false in the first place, so I created an issue in this repository.
receptor_replace_tls
is introduced by #39 and its default value isfalse
, but I believe this should betrue
by default. Or in the first place, I think there is no need to allow this parameter to be changed. Keeping module default (true
) and removingreceptor_replace_tls
should be better.I assume the reason for the default value (
false
) is to avolid handler to be triggered every time by the task withansible.builtin.copy
withforce: true
, which results alwayschanged
.However,
force: true
for theansible.builtin.copy
module does not break idempotency, as documented below.Any certificates should be copied if the file contents are different, even if the file already exists. Also, for worksign cert,
force
forcopy
module is left at the defaulttrue
: https://github.com/ansible/receptor-collection/blob/be929596f0598e0ac3956f3430bbae8603d3448f/roles/setup/tasks/worksign_local.yml@fosterseth
Could you please tell me if there is any particular reason why you set the default to false in #39?
The text was updated successfully, but these errors were encountered: