repositories: move check fips to satellite ca install (#553)

* repositories: move check fips to satellite ca install * add changelog * fix changelog url
oVirt · Jun 23, 2022 · ae11849 · ae11849
1 parent 87ade23
commit ae11849
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 9 deletions.
diff --git a/changelogs/fragments/553-repositories-move-check-fips.yml b/changelogs/fragments/553-repositories-move-check-fips.yml
@@ -0,0 +1,3 @@
+---
+bugfixes:
+  - repositories - Move fips check to satellite CA install block (https://github.com/oVirt/ovirt-ansible-collection/pull/553).
diff --git a/roles/repositories/tasks/install-satellite-ca.yml b/roles/repositories/tasks/install-satellite-ca.yml
@@ -1,4 +1,12 @@
 ---
+- name: Check if FIPS is enabled
+  ansible.builtin.command: cat /proc/sys/crypto/fips_enabled
+  changed_when: false
+  register: fips_check_command
+
+- name: Set FIPS enabled variable
+  ansible.builtin.set_fact:
+    ovirt_repositories_fips_enabled: "{{ fips_check_command.stdout == '1' }}"
 
 - name: Install Satellite certificates wihtout FIPS
   ansible.builtin.dnf:

diff --git a/roles/repositories/tasks/main.yml b/roles/repositories/tasks/main.yml
@@ -10,15 +10,6 @@
   include_tasks: backup-repos.yml
   when: ovirt_repositories_repos_backup
 
-- name: Check if FIPS is enabled
-  ansible.builtin.command: cat /proc/sys/crypto/fips_enabled
-  changed_when: false
-  register: fips_check_command
-
-- name: Set FIPS enabled variable
-  ansible.builtin.set_fact:
-    ovirt_repositories_fips_enabled: "{{ fips_check_command.stdout == '1' }}"
-
 - name: Setup repositories
   block:
     - name: Install Satellite CA