From: Dan Mick <dmick@redhat.com>
Date: Thu, 8 Feb 2024 09:41:58 +0000 (-0800)
Subject: examples/builder.yml: Add 'update-ca-trust" step for CentOS 7
X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=af1bac007dd2c4a086e1148923e932ac4b9e31d0;p=ceph-build.git

examples/builder.yml: Add 'update-ca-trust" step for CentOS 7

get_url to update agent.jar was failing with a cert error,
but jenkins.ceph.com's cert was fine; on a hunch I updated the
dynamic ca trust database and that resolved the error.  I can't
see that it would do any damage to do so unconditionally.

Signed-off-by: Dan Mick <dmick@redhat.com>
---

diff --git a/ansible/examples/builder.yml b/ansible/examples/builder.yml
index 2953c32e..911c22fd 100644
--- a/ansible/examples/builder.yml
+++ b/ansible/examples/builder.yml
@@ -920,6 +920,13 @@
             executors: '{{ executors|default(1) }}'
             exclusive: true
 
+        - name: Update ca-trust bundle
+          command:
+            cmd: "update-ca-trust"
+          when:
+            - ansible_os_family == "RedHat"
+            - ansible_distribution_major_version|int <= 7
+
         - name: Download agent.jar
           get_url:
             url: "{{ api_uri }}/jnlpJars/agent.jar"