Merge pull request #123 from tuxmea/fix_restart_with_ca_import

fix: check if import of ca is required
voxpupuli · Oct 16, 2024 · aa8c1ac · aa8c1ac
2 parents c1fc6cd + 523116f
commit aa8c1ac
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/puppetserver/docker-entrypoint.d/90-ca.sh b/puppetserver/docker-entrypoint.d/90-ca.sh
@@ -60,10 +60,14 @@ else
       exit 99
     fi
 
-    puppetserver ca import \
-      --cert-bundle $INTERMEDIATE_CA_BUNDLE \
-      --crl-chain $INTERMEDIATE_CRL_CHAIN \
-      --private-key $INTERMEDIATE_CA_KEY
+    if [[ -f /etc/puppetlabs/puppetserver/ca/ca_crt.pem ]]; then
+      echo "CA already imported."
+    else
+      puppetserver ca import \
+        --cert-bundle $INTERMEDIATE_CA_BUNDLE \
+        --crl-chain $INTERMEDIATE_CRL_CHAIN \
+        --private-key $INTERMEDIATE_CA_KEY
+    fi
   else
     new_cadir=/etc/puppetlabs/puppetserver/ca