gametize / ansible-role-install-root-cert Goto Github PK

- hosts: all
  become: yes
  environment:
     GIT_SSL_NO_VERIFY: 'true'

  vars:
    kubernetes_allow_pods_on_master: true
    install_root_cert_pem: files/CA.crt
    validate_certs: no

  roles:
    - gametize.install-root-cert
    - geerlingguy.docker
    - geerlingguy.kubernetes

PLAY [all] ***************************************************************************************************************************************************************************************************

TASK [Gathering Facts] ***************************************************************************************************************************************************************************************
ok: [192.168.33.10]

TASK [gametize.install-root-cert : Check that the root certificate exists] ***********************************************************************************************************************************
ok: [192.168.33.10 -> localhost]

TASK [gametize.install-root-cert : Make sure the folder exists (Debian, Ubuntu)] *****************************************************************************************************************************
skipping: [192.168.33.10]

TASK [gametize.install-root-cert : Copy the certificate (Debian, Ubuntu)] ************************************************************************************************************************************
skipping: [192.168.33.10]

TASK [gametize.install-root-cert : Update CA Trust (Debian, Ubuntu)] *****************************************************************************************************************************************
skipping: [192.168.33.10]

TASK [gametize.install-root-cert : Make sure the folder exists (Red Hat)] ************************************************************************************************************************************
ok: [192.168.33.10]

TASK [gametize.install-root-cert : Copy PEM into folder (Red Hat)] *******************************************************************************************************************************************
changed: [192.168.33.10]

TASK [gametize.install-root-cert : Update CA Trust (Red Hat)] ************************************************************************************************************************************************
[DEPRECATION WARNING]: Using tests as filters is deprecated. Instead of using `result|changed` instead use `result is changed`. This feature will be removed in version 2.9. Deprecation warnings can be 
disabled by setting deprecation_warnings=False in ansible.cfg.
changed: [192.168.33.10]

TASK [gametize.install-root-cert : Update CA Trust (Red Hat < 7)] ********************************************************************************************************************************************
[DEPRECATION WARNING]: Using tests as filters is deprecated. Instead of using `result|changed` instead use `result is changed`. This feature will be removed in version 2.9. Deprecation warnings can be 
disabled by setting deprecation_warnings=False in ansible.cfg.
changed: [192.168.33.10]

TASK [gametize.install-root-cert : set_fact] *****************************************************************************************************************************************************************
skipping: [192.168.33.10]

TASK [gametize.install-root-cert : Copy certificate to temporary location] ***********************************************************************************************************************************
skipping: [192.168.33.10]

TASK [gametize.install-root-cert : Add certificate to Mac OS keychain] ***************************************************************************************************************************************
skipping: [192.168.33.10]

TASK [gametize.install-root-cert : Remove temporary certificate] *********************************************************************************************************************************************
skipping: [192.168.33.10]

TASK [geerlingguy.docker : include_tasks] ********************************************************************************************************************************************************************
included: /home/apatsev/.ansible/roles/geerlingguy.docker/tasks/setup-RedHat.yml for 192.168.33.10

TASK [geerlingguy.docker : Ensure old versions of Docker are not installed.] *********************************************************************************************************************************
ok: [192.168.33.10]

TASK [geerlingguy.docker : Add Docker GPG key.] **************************************************************************************************************************************************************
changed: [192.168.33.10]

TASK [geerlingguy.docker : Add Docker repository.] ***********************************************************************************************************************************************************
changed: [192.168.33.10]

TASK [geerlingguy.docker : Configure Docker Edge repo.] ******************************************************************************************************************************************************
changed: [192.168.33.10]

TASK [geerlingguy.docker : Configure Docker Test repo.] ******************************************************************************************************************************************************
changed: [192.168.33.10]

TASK [geerlingguy.docker : include_tasks] ********************************************************************************************************************************************************************
skipping: [192.168.33.10]

TASK [geerlingguy.docker : Install Docker.] ******************************************************************************************************************************************************************
changed: [192.168.33.10]

TASK [geerlingguy.docker : Ensure containerd service dir exists.] ********************************************************************************************************************************************
changed: [192.168.33.10]

TASK [geerlingguy.docker : Add shim to ensure Docker can start in all environments.] *************************************************************************************************************************
changed: [192.168.33.10]

TASK [geerlingguy.docker : Reload systemd daemon if template is changed.] ************************************************************************************************************************************
ok: [192.168.33.10]

TASK [geerlingguy.docker : Ensure Docker is started and enabled at boot.] ************************************************************************************************************************************
changed: [192.168.33.10]

RUNNING HANDLER [geerlingguy.docker : restart docker] ********************************************************************************************************************************************************
changed: [192.168.33.10]

TASK [geerlingguy.docker : include_tasks] ********************************************************************************************************************************************************************
included: /home/apatsev/.ansible/roles/geerlingguy.docker/tasks/docker-compose.yml for 192.168.33.10

TASK [geerlingguy.docker : Check current docker-compose version.] ********************************************************************************************************************************************
ok: [192.168.33.10]

TASK [geerlingguy.docker : Delete existing docker-compose version if it's different.] ************************************************************************************************************************
skipping: [192.168.33.10]

TASK [geerlingguy.docker : Install Docker Compose (if configured).] ******************************************************************************************************************************************
fatal: [192.168.33.10]: FAILED! => {
    "changed": false
}

MSG:

Failed to validate the SSL certificate for github-production-release-asset-2e65be.s3.amazonaws.com:443. Make sure your managed systems have a valid CA certificate installed. You can use validate_certs=False if you do not need to confirm the servers identity but this is unsafe and not recommended. Paths checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org, /etc/ansible. The exception msg was: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618).

TASK [gametize.install-root-cert : Update CA Trust (Red Hat)] ****************************************
fatal: [server1]: FAILED! =>
  msg: |-
    The conditional check 'result | changed' failed. The error was: template error while templating string: no filter named 'changed'. String: {% if result | changed %} True {% else %} False {% endif %}

    The error appears to be in '/home/skrieg/.ansible/roles/gametize.install-root-cert/tasks/red_hat.yml': line 13, column 3, but may
    be elsewhere in the file depending on the exact syntax problem.

    The offending line appears to be:


    - name: Update CA Trust (Red Hat)
      ^ here