add sslrootcert to database options conditionally (fixes #1215)

ansible · Feb 8, 2023 · ce48812 · ce48812
1 parent 234a10d
commit ce48812
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/roles/installer/templates/settings/credentials.py.j2 b/roles/installer/templates/settings/credentials.py.j2
@@ -8,7 +8,9 @@ DATABASES = {
         'HOST': '{{ awx_postgres_host }}',
         'PORT': "{{ awx_postgres_port }}",
         'OPTIONS': { 'sslmode': '{{ awx_postgres_sslmode }}',
+                     {%- if awx_postgres_sslmode == 'verify-ca' or awx_postgres_sslmode == 'verify-full' %}
                      'sslrootcert': '{{ ca_trust_bundle }}',
+                     {%- endif %}
         },
     }
 }