From 32bd44a0a6db9ed3b2bcc09eb6cdc1426990d13e Mon Sep 17 00:00:00 2001 From: Markus Pesch Date: Mon, 7 Sep 2026 14:32:48 +0200 Subject: [PATCH] fix: use declared variable for client private key destination The task importing the client private key referenced `certificate_authority_client_ca_path`, a variable that is declared neither in `defaults/main.yaml` nor in `meta/argument_specs.yaml`. Every run with `certificate_authority_client_create: false` therefore aborted with an undefined variable error before the key was written. Use the actual role variable `certificate_authority_client_path` instead. Co-authored-by: Copilot --- tasks/client_certificate_import.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tasks/client_certificate_import.yaml b/tasks/client_certificate_import.yaml index 156f011..4efa9cf 100644 --- a/tasks/client_certificate_import.yaml +++ b/tasks/client_certificate_import.yaml @@ -3,7 +3,7 @@ - name: Import private key of a client ansible.builtin.copy: content: "{{ certificate_authority_client_tls_key_content }}" - dest: "{{ certificate_authority_client_ca_path }}/privkey.pem" + dest: "{{ certificate_authority_client_path }}/privkey.pem" owner: "root" group: "root" mode: "0600"