From 4c4ebfcb33c5b31dcc637b57edba18f5bf9ffbea Mon Sep 17 00:00:00 2001 From: a-palchikov Date: Fri, 25 Oct 2019 00:10:34 +0200 Subject: [PATCH] Do not rotate secrets if no runtime update (#835) --- lib/update/cluster/phases/init.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/update/cluster/phases/init.go b/lib/update/cluster/phases/init.go index 6b2cb4cf18..dd9e8439ab 100644 --- a/lib/update/cluster/phases/init.go +++ b/lib/update/cluster/phases/init.go @@ -194,10 +194,10 @@ func (p *updatePhaseInit) Execute(context.Context) error { return trace.Wrap(err, "failed to update Docker configuration") } for _, server := range p.Servers { - if err := p.rotateSecrets(server); err != nil { - return trace.Wrap(err, "failed to rotate secrets for %v", server) - } if server.Runtime.Update != nil { + if err := p.rotateSecrets(server); err != nil { + return trace.Wrap(err, "failed to rotate secrets for %v", server) + } if err := p.rotatePlanetConfig(server); err != nil { return trace.Wrap(err, "failed to rotate planet configuration for %v", server) }