From ce48812921bf698b135236825e187d3233ddc225 Mon Sep 17 00:00:00 2001 From: Andrii Salnikov Date: Thu, 9 Feb 2023 00:57:19 +0100 Subject: [PATCH] add sslrootcert to database options conditionally (fixes #1215) --- roles/installer/templates/settings/credentials.py.j2 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/roles/installer/templates/settings/credentials.py.j2 b/roles/installer/templates/settings/credentials.py.j2 index 3f8f1380..c79b1bdb 100644 --- a/roles/installer/templates/settings/credentials.py.j2 +++ b/roles/installer/templates/settings/credentials.py.j2 @@ -8,7 +8,9 @@ DATABASES = { 'HOST': '{{ awx_postgres_host }}', 'PORT': "{{ awx_postgres_port }}", 'OPTIONS': { 'sslmode': '{{ awx_postgres_sslmode }}', + {%- if awx_postgres_sslmode == 'verify-ca' or awx_postgres_sslmode == 'verify-full' %} 'sslrootcert': '{{ ca_trust_bundle }}', + {%- endif %} }, } }