From f1660c8bd10f3427d6d0425703fa3b94de697ea7 Mon Sep 17 00:00:00 2001
From: Bruno Rocha <rochacbruno@users.noreply.github.com>
Date: Fri, 9 May 2025 18:35:55 +0100
Subject: [PATCH] Address review comments

---
 roles/installer/templates/settings/ldap.py.j2 | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/roles/installer/templates/settings/ldap.py.j2 b/roles/installer/templates/settings/ldap.py.j2
index 8cbf426d..4fad696e 100644
--- a/roles/installer/templates/settings/ldap.py.j2
+++ b/roles/installer/templates/settings/ldap.py.j2
@@ -1,11 +1,13 @@
+{% if ldap_cacert_ca_crt %}
 import ldap
 
 AUTH_LDAP_GLOBAL_OPTIONS = {
-{% if ldap_cacert_ca_crt %}
     ldap.OPT_X_TLS_REQUIRE_CERT: True,
     ldap.OPT_X_TLS_CACERTFILE: "/etc/openldap/certs/ldap-ca.crt"
-{% endif %}
 }
+{% else %}
+AUTH_LDAP_GLOBAL_OPTIONS = {}
+{% endif %}
 
 # Load LDAP BIND password from Kubernetes secret if define
 {% if ldap_password_secret -%}