Change to handle cert sync logic in AMIs when running in all-in-one m…

…ode (#5452) (#5526)
gravitational · Feb 10, 2021 · d15ab12 · d15ab12
1 parent 43fa7e4
commit d15ab12
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/assets/aws/files/bin/teleport-check-cert b/assets/aws/files/bin/teleport-check-cert
@@ -24,11 +24,13 @@ if [ $? -eq 0 ]; then
     echo "Certificates are equal, nothing to do"
 else
     echo "Certificates are different, going to update and restart proxy"
-    su teleport -c "aws s3 sync --exact-timestamps s3://${TELEPORT_S3_BUCKET}/live/${TELEPORT_DOMAIN_NAME} /var/lib/teleport"
+    SYNC_COMMAND="aws s3 sync --exact-timestamps s3://${TELEPORT_S3_BUCKET}/live/${TELEPORT_DOMAIN_NAME} /var/lib/teleport"
     # handle proxy role
     if [ -f /etc/teleport.d/role.proxy ]; then
+        su teleport -c "${SYNC_COMMAND}"
         systemctl reload teleport-proxy.service
     else
+        ${SYNC_COMMAND}
         systemctl reload teleport.service
     fi
 fi