Currently, the role will always return at least one step as changed, making it look non-idempotent: The "generate the initial certificate" (which btw. should be renamed to use the plural) step does not correctly check in the script if anything has changed at all.
I suspect that we can somehow – from the script – tell Ansible via the return code or with suppressing the output that no data was changed.
Currently, the role will always return at least one step as changed, making it look non-idempotent: The "generate the initial certificate" (which btw. should be renamed to use the plural) step does not correctly check in the script if anything has changed at all.
I suspect that we can somehow – from the script – tell Ansible via the return code or with suppressing the output that no data was changed.