Merge ~canonical-bootstack/charm-openstack-service-checks:fix/ssl_dependency into ~canonical-bootstack/charm-openstack-service-checks:master

[Andrea Ieri]

Install the CA cert early

[🤖 Canonical IS Merge Bot (canonical-is-mergebot)]

This merge proposal is being monitored by mergebot. Change the status to Approved to merge.

[Xav Paice (xavpaice)]

lgtm +1

review: Approve

[🤖 Canonical IS Merge Bot (canonical-is-mergebot)]

Change successfully merged at revision d96322f33c7378d564a248902e416acde8cf1f4a

diff --git a/reactive/service_checks.py b/reactive/service_checks.py
index 5de3e51..5bd72c2 100644
--- a/reactive/service_checks.py
+++ b/reactive/service_checks.py
@@ -173,6 +173,8 @@ def nrpe_connected(nem):
 @when('os-service-checks.installed')
 @when_not('os-service-checks.configured')
 def render_config():
+    if config.get('trusted_ssl_ca', None):
+        fix_ssl()
     creds = get_credentials()
     if not creds:
         hookenv.log('render_config: No credentials yet, skipping')
@@ -182,8 +184,6 @@ def render_config():
     render('nagios.novarc', NOVARC, creds,
            owner='nagios', group='nagios')
     render_checks()
-    if config.get('trusted_ssl_ca', None):
-        fix_ssl()
     set_state('os-service-checks.configured')
     remove_state('os-service-checks.started')