ctubbsii commented on a change in pull request #411:
URL: https://github.com/apache/fluo-muchos/pull/411#discussion_r722859111
##########
File path: ansible/roles/proxy/tasks/main.yml
##########
@@ -25,3 +25,10 @@
file: path={{ tarballs_dir }} state=directory
- name: "copy /etc/hosts to proxy"
template: src=roles/proxy/templates/etc_hosts dest=/etc/etc_hosts owner=root
group=root mode=0644
+# Update ca-certificates to ensure that CA certificates are new enough
+# to support SSL verification against websites used to download software
+- name: "update ca-certificates package to latest version"
+ yum:
+ name: 'ca-certificates*'
+ state: latest
+ update_only: yes
Review comment:
OBE if you update to latest CentOS 7 in the example props.
I think the wildcard should be dropped, because any other matching RPMs
would be unexpected and who knows what they might contain. Keeping
`update_only` is safer with the wildcard. Dropping the wildcard, I don't have a
strong opinion about `update_only`. It'd be redundant, but harmless. In any
case, all this is OBE if you update to the latest CentOS 7, which I think is
better.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
