Check if import of ca is required

fixes voxpupuli#122 Signed-off-by: Martin Alfke <[email protected]>
tuxmea · Sep 11, 2024 · 213e103 · 213e103
1 parent 4622895
commit 213e103
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/puppetserver/docker-entrypoint.d/90-ca.sh b/puppetserver/docker-entrypoint.d/90-ca.sh
@@ -60,10 +60,14 @@ else
       exit 99
     fi
 
-    puppetserver ca import \
-      --cert-bundle $INTERMEDIATE_CA_BUNDLE \
-      --crl-chain $INTERMEDIATE_CRL_CHAIN \
-      --private-key $INTERMEDIATE_CA_KEY
+    if [[ -f /etc/puppetlabs/puppet/ssl/certs/ca.pem ]]; then
+      echo "CA already imported."
+    else
+      puppetserver ca import \
+        --cert-bundle $INTERMEDIATE_CA_BUNDLE \
+        --crl-chain $INTERMEDIATE_CRL_CHAIN \
+        --private-key $INTERMEDIATE_CA_KEY
+    fi
   else
     new_cadir=/etc/puppetlabs/puppetserver/ca