openstack
/
tripleo-operator-ansible
Code Issues Proposed changes

Disable gpg verify for tripleo-repos rpm install 

Ansible addressed gpg verification for CVE-2020-14365 and we need to
disable the gpg check for the installation of an rpm package from a url.

Change-Id: I736bb62d2118734e567ee00e7ec9554828e56852
This commit is contained in:
Alex Schultz 2020-09-04 14:32:23 -06:00
parent 6c2a1fcd60
commit a41a72483a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/tripleo_repos/tasks/install.yml
View File

@ -29,4 +29,6 @@
yum:
name: "{{ _tripleo_repos_repo_url }}{{ _tripleo_repos_rpm }}"
state: present
# We do not sign the rpm and we are fetching straight from a URL
disable_gpg_check: true
become: true