fix: unbound idempotency

This commit is contained in:
Clément Désiles 2026-01-18 13:46:16 +01:00
parent 8d3db69172
commit 5a880d5d5a
No known key found for this signature in database

View File

@ -107,10 +107,17 @@
ansible.builtin.file: ansible.builtin.file:
path: /tmp/hosts.txt path: /tmp/hosts.txt
state: absent state: absent
- name: Check if root.key exists
ansible.builtin.stat:
path: "{{ unbound_anchor_root_key }}"
register: root_key_stat
- name: Initialize dnssec trust anchor if missing - name: Initialize dnssec trust anchor if missing
ansible.builtin.command: unbound-anchor -a {{ unbound_anchor_root_key }} ansible.builtin.command: unbound-anchor -a {{ unbound_anchor_root_key }}
args: when: not root_key_stat.stat.exists
creates: "{{ unbound_anchor_root_key }}" register: unbound_anchor_result
failed_when: unbound_anchor_result.rc != 0 and unbound_anchor_result.rc != 1
changed_when: unbound_anchor_result.rc == 0
- name: Ensure root.key has correct ownership and permissions - name: Ensure root.key has correct ownership and permissions
ansible.builtin.file: ansible.builtin.file: