Include REQUESTS_CA_BUNDLE in pip task environment

If the SSH or login session is not restarted, it is possible that
recently written contents of /etc/environment are not accounted for
when installing the built wheels when TLS is enabled on the internal
VIP.

REQUESTS_CA_BUNDLE must be set to allow pip to trust the certificate
presented on the internal VIP.

Change-Id: I7ed37d76c4c3854dc4939c884062bd03a76ece37

defaults/main.yml

@@ -90,7 +90,8 @@ venv_default_pip_install_args: >-
 venv_pip_install_args: ""
 
 # Environemnt to be set for building the wheels
-venv_pip_install_env: {}
+venv_pip_install_env:
+  REQUESTS_CA_BUNDLE: "{{ _venv_install_ca_bundle_path }}"
 
 # Some python packages have C bindings which tend to be very
 # particular about the version of their underlying shared libraries.

vars/debian.yml

@@ -24,3 +24,5 @@ _venv_build_base_distro_package_list:
 _venv_install_base_distro_package_list:
     - python3-venv
     - python3-setuptools
+
+_venv_install_ca_bundle_path: /etc/ssl/certs/ca-certificates.crt

vars/redhat-9.yml

@@ -21,3 +21,5 @@ _venv_build_base_distro_package_list:
     - python3-devel
 
 _venv_install_base_distro_package_list: []
+
+_venv_install_ca_bundle_path: /etc/pki/tls/certs/ca-bundle.crt