add osbs ca to stage koji

handlers/update_ca_trust.yml

@@ -0,0 +1,6 @@
+########################################
+# Handlers for updating ca trust
+#
+
+- name: update ca trust
+  shell: "update-ca-trust"

playbooks/groups/buildhw.yml

@@ -14,6 +14,7 @@
 
   pre_tasks:
   - include: "{{ tasks }}/yumrepos.yml"
+  - include: "{{ tasks }}/osbs_certs.yml"
 
   roles:
   - base

playbooks/groups/buildvm.yml

@@ -17,6 +17,7 @@
 
   pre_tasks:
   - include: "{{ tasks }}/yumrepos.yml"
+  - include: "{{ tasks }}/osbs_certs.yml"
 
   roles:
   - base

playbooks/groups/koji-hub.yml

@@ -16,6 +16,9 @@
    - "/srv/private/ansible/vars.yml"
    - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
 
+  pre_tasks:
+    - include: "{{ tasks }}/osbs_certs.yml"
+
   roles:
   - base
   - rkhunter

tasks/osbs_certs.yml

@@ -0,0 +1,11 @@
+---
+
+- include: "{{ handlers }}/update_ca_trust.yml"
+
+- name: put the osbs certs in place
+  copy:
+    src: "{{private}}/files/osbs/osbs-dev.certs/osbs-dev.fedorainfracloud.org.crt"
+    dest: "/etc/pki/ca-trust/source/anchors/osbs-dev.fedorainfracloud.org.crt"
+  when: env == "staging"
+  handlers:
+    - update ca trust