Always upgrade ca-certificates

Ca-certificates is vital part of every system nowadays and it's
important to keep this package to it's latest state anytime role is ran.

Change-Id: Icde7acdc2ea0cbfa44d2f7f0ff8b35358d8cc9e8

vars/debian.yml

@@ -82,7 +82,9 @@ _package_repos_keys:
     url: "http://osbpo.debian.net/osbpo/dists/pubkey.gpg"
     state: present
 
-_package_list: []
+_package_list:
+  - name: ca-certificates
+    state: latest
 
 _osbpo_release: "{{ hostvars[inventory_hostname]['ansible_facts']['distribution_major_version'] is version('10', '>') | ternary(openstack_distrib_code_name | lower, 'victoria') }}"
 

vars/redhat-8.yml

@@ -86,6 +86,8 @@ _package_list:
     state: absent
   - name: centos-release-storage-common
     state: absent
+  - name: ca-certificates
+    state: latest
 
 _openstack_hosts_rdo_repo_url: "{{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/current/"
 _openstack_hosts_rdo_deps_url: "{{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/deps/latest/"

vars/ubuntu-18.04.yml

@@ -89,6 +89,8 @@ _package_repos_keys: []
 _package_list:
   - name: ubuntu-cloud-keyring
     state: "{{ openstack_hosts_package_state }}"
+  - name: ca-certificates
+    state: latest
 
 _package_repos:
   # Implement the current UCA repo configuration

vars/ubuntu-20.04.yml

@@ -87,6 +87,8 @@ _package_repos_keys: []
 _package_list:
   - name: ubuntu-cloud-keyring
     state: "{{ openstack_hosts_package_state }}"
+  - name: ca-certificates
+    state: latest
 
 _package_repos: []
   # Implement the current UCA repo configuration