Skip to content

fix: configure requests to use CA for Pulp#2316

Open
jackhodgkiss wants to merge 1 commit into
stackhpc/2025.1from
pulp-tls-ca-fix
Open

fix: configure requests to use CA for Pulp#2316
jackhodgkiss wants to merge 1 commit into
stackhpc/2025.1from
pulp-tls-ca-fix

Conversation

@jackhodgkiss
Copy link
Copy Markdown
Contributor

The Pulp playbooks used at client sites can fail when Pulp is configured to use TLS with certificates generated by our internal TLS process in combination with the newer Pulp collection and tools.

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several Ansible playbooks to support pulp_enable_tls by configuring the REQUESTS_CA_BUNDLE environment variable for various Pulp-related tasks. It introduces logic to determine the appropriate CA bundle path based on the OS family and ensures fact gathering is enabled where required. The review feedback suggests improving maintainability by deduplicating the CA bundle variable logic into a central configuration file, using the | bool filter for more robust evaluation of the pulp_enable_tls variable, and moving environment blocks to the play level to reduce repetition.

Comment thread etc/kayobe/ansible/pulp/pulp-container-publish.yml Outdated
Comment thread etc/kayobe/ansible/pulp/pulp-container-publish.yml
Comment thread etc/kayobe/ansible/pulp/pulp-container-sync.yml
Comment thread etc/kayobe/ansible/pulp/pulp-repo-promote-production.yml
Comment thread etc/kayobe/ansible/pulp/pulp-repo-publish.yml
Comment thread etc/kayobe/ansible/pulp/pulp-repo-publish.yml
Comment thread etc/kayobe/ansible/pulp/pulp-repo-sync.yml
The `Pulp` playbooks used at client sites can fail when `Pulp` is
configured to use TLS with certificates generated by our internal `TLS`
process in combination with the newer `Pulp` collection and tools.

Signed-off-by: Jack Hodgkiss <jack@stackhpc.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant