openstack/ansible-role-python_venv_build
Code Issues Proposed changes

Include REQUESTS_CA_BUNDLE in pip task environment

Browse Source 
If the SSH or login session is not restarted, it is possible that
recently written contents of /etc/environment are not accounted for
when installing the built wheels when TLS is enabled on the internal
VIP.

REQUESTS_CA_BUNDLE must be set to allow pip to trust the certificate
presented on the internal VIP.

Change-Id: I7ed37d76c4c3854dc4939c884062bd03a76ece37
This commit is contained in:
Jonathan Rosser 2024-05-01 10:44:10 +01:00
parent d80a61f810
commit 366222725e
3 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
defaults/main.yml
View File

@ -90,7 +90,8 @@ venv_default_pip_install_args: >-
venv_pip_install_args: "" venv_pip_install_args: ""
# Environemnt to be set for building the wheels # Environemnt to be set for building the wheels
venv_pip_install_env: {} venv_pip_install_env:
REQUESTS_CA_BUNDLE: "{{ _venv_install_ca_bundle_path }}"
# Some python packages have C bindings which tend to be very # Some python packages have C bindings which tend to be very
# particular about the version of their underlying shared libraries. # particular about the version of their underlying shared libraries.

2
vars/debian.yml
View File

@ -24,3 +24,5 @@ _venv_build_base_distro_package_list:
_venv_install_base_distro_package_list: _venv_install_base_distro_package_list:
- python3-venv - python3-venv
- python3-setuptools - python3-setuptools
_venv_install_ca_bundle_path: /etc/ssl/certs/ca-certificates.crt

2
vars/redhat-9.yml
View File

@ -21,3 +21,5 @@ _venv_build_base_distro_package_list:
- python3-devel - python3-devel
_venv_install_base_distro_package_list: [] _venv_install_base_distro_package_list: []
_venv_install_ca_bundle_path: /etc/pki/tls/certs/ca-bundle.crt