From 8c4ef001c148dc16c980bfc7ea695311e6dfd612 Mon Sep 17 00:00:00 2001 From: Dmitriy Rabotyagov Date: Tue, 23 Nov 2021 17:03:35 +0200 Subject: [PATCH] Always upgrade ca-certificates Ca-certificates is vital part of every system nowadays and it's important to keep this package to it's latest state anytime role is ran. Change-Id: Icde7acdc2ea0cbfa44d2f7f0ff8b35358d8cc9e8 --- vars/debian.yml | 4 +++- vars/redhat-8.yml | 2 ++ vars/ubuntu-18.04.yml | 2 ++ vars/ubuntu-20.04.yml | 2 ++ 4 files changed, 9 insertions(+), 1 deletion(-) diff --git a/vars/debian.yml b/vars/debian.yml index 721a37ef..2c290f42 100644 --- a/vars/debian.yml +++ b/vars/debian.yml @@ -82,7 +82,9 @@ _package_repos_keys: url: "http://osbpo.debian.net/osbpo/dists/pubkey.gpg" state: present -_package_list: [] +_package_list: + - name: ca-certificates + state: latest _osbpo_release: "{{ hostvars[inventory_hostname]['ansible_facts']['distribution_major_version'] is version('10', '>') | ternary(openstack_distrib_code_name | lower, 'victoria') }}" diff --git a/vars/redhat-8.yml b/vars/redhat-8.yml index 24e6230d..36cd9a7c 100644 --- a/vars/redhat-8.yml +++ b/vars/redhat-8.yml @@ -86,6 +86,8 @@ _package_list: state: absent - name: centos-release-storage-common state: absent + - name: ca-certificates + state: latest _openstack_hosts_rdo_repo_url: "{{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/current/" _openstack_hosts_rdo_deps_url: "{{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/deps/latest/" diff --git a/vars/ubuntu-18.04.yml b/vars/ubuntu-18.04.yml index c732fb25..6c64e739 100644 --- a/vars/ubuntu-18.04.yml +++ b/vars/ubuntu-18.04.yml @@ -89,6 +89,8 @@ _package_repos_keys: [] _package_list: - name: ubuntu-cloud-keyring state: "{{ openstack_hosts_package_state }}" + - name: ca-certificates + state: latest _package_repos: # Implement the current UCA repo configuration diff --git a/vars/ubuntu-20.04.yml b/vars/ubuntu-20.04.yml index 58b96866..c76c1c16 100644 --- a/vars/ubuntu-20.04.yml +++ b/vars/ubuntu-20.04.yml @@ -87,6 +87,8 @@ _package_repos_keys: [] _package_list: - name: ubuntu-cloud-keyring state: "{{ openstack_hosts_package_state }}" + - name: ca-certificates + state: latest _package_repos: [] # Implement the current UCA repo configuration