AMW-592 AMW Github Actions are failing because of latest molecule

roles/keycloak/tasks/install.yml

@@ -87,7 +87,7 @@
     mode: '0644'
     url_username: "{{ keycloak_binary_download_user | default(omit) }}"
     url_password: "{{ keycloak_binary_download_pass | default(omit) }}"
-    validate_certs: false
+    validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}"
   delegate_to: localhost
   run_once: true
   when:
@@ -114,7 +114,7 @@
         product_type: DISTRIBUTION
         product_version: "{{ sso_version.split('.')[:2] | join('.') }}"
         product_category: "{{ sso_product_category }}"
-        validate_certs: false
+        validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}"
       register: keycloak_rhn_products
       no_log: "{{ omit_rhn_output | default(true) }}"
       delegate_to: localhost
@@ -135,7 +135,7 @@
         client_secret: "{{ rhn_password }}"
         product_id: "{{ (keycloak_rhn_filtered_products | first).id }}"
         dest: "{{ keycloak_local_path.stat.path }}/{{ keycloak_archive }}"
-        validate_certs: false
+        validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}"
       no_log: "{{ omit_rhn_output | default(true) }}"
       delegate_to: localhost
       run_once: true
@@ -145,7 +145,7 @@
     url: "{{ keycloak_rhsso_download_url }}"
     dest: "{{ keycloak_local_path.stat.path }}/{{ keycloak_archive }}"
     mode: '0644'
-    validate_certs: false
+    validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}"
   delegate_to: localhost
   run_once: true
   when:

roles/keycloak/tasks/main.yml

@@ -60,7 +60,7 @@
         url: "{{ keycloak_url }}/auth/realms/master/protocol/openid-connect/token"
         method: POST
         body: "client_id={{ keycloak_auth_client }}&username={{ keycloak_admin_user }}&password={{ keycloak_admin_password }}&grant_type=password"
-        validate_certs: false
+        validate_certs: "{{ keycloak_validate_certs | default(omit) }}"
       register: keycloak_auth_response
       until: keycloak_auth_response.status == 200
       retries: 2
@@ -81,6 +81,7 @@
     - name: "Wait until service becomes active: {{ keycloak_config.service_name }}"
       ansible.builtin.uri:
         url: "{{ keycloak_config.health_url }}"
+        validate_certs: "{{ keycloak_validate_certs | default(omit) }}"
       register: keycloak_status
       until: keycloak_status.status == 200
       retries: 25

roles/keycloak/tasks/restart_keycloak.yml

@@ -12,6 +12,7 @@
 - name: "Wait until service becomes active: {{ keycloak_config.service_name }}"
   ansible.builtin.uri:
     url: "{{ keycloak_config.health_url }}"
+    validate_certs: "{{ keycloak_validate_certs | default(omit) }}"
   register: keycloak_status
   until: keycloak_status.status == 200
   delegate_to: "{{ ansible_play_hosts | first }}"

roles/keycloak/tasks/rhsso_patch.yml

@@ -29,7 +29,7 @@
         product_type: BUGFIX
         product_version: "{{ sso_version.split('.')[:2] | join('.') }}"
         product_category: "{{ sso_product_category }}"
-        validate_certs: false
+        validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}"
       register: keycloak_rhn_products
       no_log: "{{ omit_rhn_output | default(true) }}"
       delegate_to: localhost
@@ -75,7 +75,7 @@
         client_secret: "{{ rhn_password }}"
         product_id: "{{ (keycloak_rhn_filtered_products | sort | last).id }}"
         dest: "{{ keycloak_local_path.stat.path }}/{{ keycloak_patch_bundle }}"
-        validate_certs: false
+        validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}"
       no_log: "{{ omit_rhn_output | default(true) }}"
       delegate_to: localhost
       run_once: true
@@ -143,6 +143,7 @@
     - name: "Wait until service becomes active: {{ keycloak_config.service_name }}"
       ansible.builtin.uri:
         url: "{{ keycloak_config.health_url }}"
+        validate_certs: "{{ keycloak_validate_certs | default(omit) }}"
       register: keycloak_status
       until: keycloak_status.status == 200
       retries: 25

roles/keycloak/tasks/start_keycloak.yml

@@ -10,6 +10,7 @@
 - name: "Wait until service becomes active: {{ keycloak_config.service_name }}"
   ansible.builtin.uri:
     url: "{{ keycloak_config.health_url }}"
+    validate_certs: "{{ keycloak_validate_certs | default(omit) }}"
   register: keycloak_status
   until: keycloak_status.status == 200
   retries: "{{ keycloak_service_start_retries }}"