Skip to content

Commit 190ce02

Browse files
committed
[dlrn_report] Set crypto policies when FIPS is enabled
Since some CI jobs are running using the PreMetal tool, and we move the job execution from controller node to hypervisor directly, the crypto policies are different. For example, when the task was executed on controller: update-crypto-policies --show DEFAULT Where, in some case, where uni job require FIPS, output is: update-crypto-policies --show FIPS Set the AD-SUPPORT policy when just FIPS is enabled. Signed-off-by: Daniel Pawlik <dpawlik@redhat.com>
1 parent 4b40434 commit 190ce02

1 file changed

Lines changed: 12 additions & 0 deletions

File tree

roles/dlrn_report/tasks/dlrn_report_results.yml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,18 @@
1414
ansible.builtin.include_role:
1515
name: repo_setup
1616

17+
- name: Check currently enabled crypto policies
18+
become: true
19+
ansible.builtin.command: >
20+
update-crypto-policies --show
21+
register: _crypto_policies_status
22+
23+
- name: Update crypto policies when FIPS is set
24+
when: "'FIPS' in _crypto_policies_status.stdout"
25+
become: true
26+
ansible.builtin.command: >
27+
update-crypto-policies --set FIPS:AD-SUPPORT
28+
1729
- name: Perform kinit for DLRN kerberos authentication
1830
ansible.builtin.command:
1931
cmd: >-

0 commit comments

Comments
 (0)