Delete server certificates after we've replaced them

This change deletes all the replaced certificates in update_certs.
ministryofjustice · Mar 16, 2016 · 21de0d0 · 21de0d0
1 parent dc372d9
commit 21de0d0
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/bootstrap_cfn/fab_tasks.py b/bootstrap_cfn/fab_tasks.py
@@ -592,6 +592,13 @@ def update_certs():
                                                       stack_name,
                                                       max_retries=3,
                                                       retry_delay=10)
+            for cert_name in replaced_certs:
+                logger.info("Deleting replaced certificate '%s'..."
+                            % (cert_name))
+                iam.delete_certificate(cert_name,
+                                       stack_name,
+                                       max_retries=3,
+                                       retry_delay=10)
     else:
         logger.error("No certificates updated so skipping "
                      "ELB certificate update...")