Do not rotate secrets if no runtime update (#835)

gravitational · Oct 24, 2019 · 4c4ebfc · 4c4ebfc
1 parent af0771d
commit 4c4ebfc
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/lib/update/cluster/phases/init.go b/lib/update/cluster/phases/init.go
@@ -194,10 +194,10 @@ func (p *updatePhaseInit) Execute(context.Context) error {
 		return trace.Wrap(err, "failed to update Docker configuration")
 	}
 	for _, server := range p.Servers {
-		if err := p.rotateSecrets(server); err != nil {
-			return trace.Wrap(err, "failed to rotate secrets for %v", server)
-		}
 		if server.Runtime.Update != nil {
+			if err := p.rotateSecrets(server); err != nil {
+				return trace.Wrap(err, "failed to rotate secrets for %v", server)
+			}
 			if err := p.rotatePlanetConfig(server); err != nil {
 				return trace.Wrap(err, "failed to rotate planet configuration for %v", server)
 			}