AMW-592 AMW Github Actions are failing because of latest molecule

roles/keycloak_realm/tasks/main.yml

@@ -4,7 +4,7 @@
     url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/realms/master/protocol/openid-connect/token"
     method: POST
     body: "client_id={{ keycloak_realm_auth_client }}&username={{ keycloak_realm_admin_user }}&password={{ keycloak_realm_admin_password }}&grant_type=password"
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
   no_log: "{{ keycloak_realm_no_log | default('True') }}"
   register: keycloak_realm_auth_response
   until: keycloak_realm_auth_response.status == 200
@@ -15,7 +15,7 @@
   ansible.builtin.uri:
     url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ keycloak_realm_realm }}"
     method: GET
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     status_code:
       - 200
       - 404
@@ -29,7 +29,7 @@
     url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms"
     method: POST
     body: "{{ lookup('template', 'realm.json.j2') }}"
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     body_format: json
     headers:
       Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}"
@@ -42,6 +42,7 @@
     auth_realm: "{{ keycloak_realm_auth_realm }}"
     auth_username: "{{ keycloak_realm_admin_user }}"
     auth_password: "{{ keycloak_realm_admin_password }}"
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     realm: "{{ item.realm | default(keycloak_realm_realm) }}"
     name: "{{ item.name }}"
     state: present
@@ -72,6 +73,7 @@
     auth_realm: "{{ keycloak_realm_auth_realm }}"
     auth_username: "{{ keycloak_realm_admin_user }}"
     auth_password: "{{ keycloak_realm_admin_password }}"
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     realm: "{{ item.realm | default(keycloak_realm_realm) }}"
     default_roles: "{{ item.roles | default(omit) }}"
     client_id: "{{ item.client_id | default(omit) }}"

roles/keycloak_realm/tasks/manage_client_roles.yml

@@ -8,6 +8,7 @@
     auth_realm: "{{ keycloak_realm_auth_realm }}"
     auth_username: "{{ keycloak_realm_admin_user }}"
     auth_password: "{{ keycloak_realm_admin_password }}"
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     state: present
   loop: "{{ client.roles | flatten }}"
   no_log: "{{ keycloak_realm_no_log | default('True') }}"

roles/keycloak_realm/tasks/manage_token_lifespan.yml

@@ -5,7 +5,7 @@
     method: PUT
     body:
       accessTokenLifespan: 300
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     body_format: json
     status_code:
       - 200

roles/keycloak_realm/tasks/manage_user.yml

@@ -2,7 +2,7 @@
 - name: "Check if User Already Exists"
   ansible.builtin.uri:
     url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ keycloak_realm_realm }}/users?username={{ user.username }}"
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     headers:
       Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}"
   register: keycloak_realm_user_search_result
@@ -18,7 +18,7 @@
       email: "{{ user.email | default(omit) }}"
       firstName: "{{ user.firstName | default(omit) }}"
       lastName: "{{ user.lastName | default(omit) }}"
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     body_format: json
     headers:
       Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}"
@@ -28,7 +28,7 @@
 - name: "Get User"
   ansible.builtin.uri:
     url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ keycloak_realm_realm }}/users?username={{ user.username }}"
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     headers:
       Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}"
   register: keycloak_realm_user
@@ -41,7 +41,7 @@
       type: password
       temporary: false
       value: "{{ user.password }}"
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     body_format: json
     status_code:
       - 200

roles/keycloak_realm/tasks/manage_user_client_roles.yml

@@ -3,7 +3,7 @@
   ansible.builtin.uri:
     url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ client_role.realm | default(keycloak_realm_realm) }}"
     method: GET
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     status_code:
       - 200
     headers:
@@ -17,7 +17,7 @@
           default(keycloak_realm_realm) }}/users/{{ (keycloak_realm_user.json | first).id }}/role-mappings/clients/{{ (keycloak_realm_create_client_result.results | \
           selectattr('end_state.clientId', 'equalto', client_role.client) | list | first).end_state.id }}/available"
     method: GET
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     status_code:
       - 200
     headers:
@@ -37,7 +37,7 @@
         containerId: "{{ item.containerId }}"
         name: "{{ item.name }}"
         composite: "{{ item.composite }}"
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     body_format: json
     headers:
       Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}"

roles/keycloak_realm/tasks/manage_user_roles.yml

@@ -2,8 +2,8 @@
 - name: "Get User {{ user.username }}"
   ansible.builtin.uri:
     url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ keycloak_realm_realm }}/users?username={{ user.username }}"
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
     headers:
-      validate_certs: false
       Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}"
   register: keycloak_realm_user
 
@@ -12,7 +12,7 @@
     url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/realms/master/protocol/openid-connect/token"
     method: POST
     body: "client_id={{ keycloak_realm_auth_client }}&username={{ keycloak_realm_admin_user }}&password={{ keycloak_realm_admin_password }}&grant_type=password"
-    validate_certs: false
+    validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}"
   register: keycloak_realm_auth_response
   no_log: "{{ keycloak_realm_no_log | default('True') }}"
   until: keycloak_realm_auth_response.status == 200