Fix URI for Shibboleth on EL

We use Rocky repos, as modern Shibboleth is available
for Rocky 8/9/10 only. It should be compatible with other
EL-based distros as well though.

This is alternative patch to [1]

[1] https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/963474

Change-Id: I57f9423e69e7353f89b5571e7eb540a31c9bce6e
Signed-off-by: Dmitriy Rabotyagov <dmitriy.rabotyagov@cleura.com>

defaults/main.yml

@@ -35,8 +35,8 @@ keystone_install_method: "{{ service_install_method | default('source') }}"
 keystone_venv_python_executable: "{{ openstack_venv_python_executable | default('python3') }}"
 
 # Centos shibboleth repository options
-keystone_centos_shibboleth_mirror: "http://download.opensuse.org/repositories/security:/shibboleth/CentOS_7/"
-keystone_centos_shibboleth_key: "http://download.opensuse.org/repositories/security:/shibboleth/CentOS_7//repodata/repomd.xml.key"
+keystone_centos_shibboleth_mirror: "https://shibboleth.net/cgi-bin/mirrorlist.cgi/rockylinux{{ ansible_facts['distribution_major_version'] }}"
+keystone_centos_shibboleth_key: "https://shibboleth.net/downloads/service-provider/RPMS/cantor.repomd.xml.key"
 
 # Role standard API override this option in the OS variable files
 keystone_shibboleth_repo: {}

releasenotes/notes/shibboleth_mirror_el-89e41075a1ee8fbf.yaml

@@ -0,0 +1,4 @@
+---
+fixes:
+  - |
+    URI to Shibboleth mirror has been fixed for EL-based distributions.