diff --git a/roles/vault/tasks/shared/gen_ca.yml b/roles/vault/tasks/shared/gen_ca.yml index 291f42734..654cc3ff3 100644 --- a/roles/vault/tasks/shared/gen_ca.yml +++ b/roles/vault/tasks/shared/gen_ca.yml @@ -12,6 +12,7 @@ method: POST body_format: json body: "{{ gen_ca_vault_options }}" + status_code: 200,204 register: vault_ca_gen delegate_to: "{{ groups.vault|first }}" run_once: true @@ -21,9 +22,11 @@ content: "{{ hostvars[groups.vault|first]['vault_ca_gen']['json']['data']['certificate'] }}" dest: "{{ gen_ca_cert_dir }}/ca.pem" mode: 0644 + when: vault_ca_gen.status == 200 - name: "bootstrap/gen_ca | Copy {{ gen_ca_mount_path }} root CA key locally" copy: content: "{{ hostvars[groups.vault|first]['vault_ca_gen']['json']['data']['private_key'] }}" dest: "{{ gen_ca_cert_dir }}/ca-key.pem" mode: 0640 + when: vault_ca_gen.status == 200