I would use the uri module to download the Engine's CA to /etc/pki/ca-cert/sources (or whatever it was) on EL systems (in debian-based is a little bit different)  locally and then run 'update-ca-certificates --extract' .

Usually I run my ansible from the engine itself. Have you thought about it ?

Best Regards,
Strahil Nikolov

On Thu, Apr 21, 2022 at 10:02, fs3000--- via Users
<users@ovirt.org> wrote:
Hello guys,

So i read in the documentation that managing  VMs is not done with ovirt-shell anymore, ansible should be used instead. Ansible can manage VMs via modules, connecting to the Manager VM. However, how can i start the Manager VM itself, if it stopped? (it just happened to me)  Catch 22 problem :)


Anyway, i tried using the ovirt_vm_info modulei in ansible, but it resulted in an error, because the web interface is running with a self signed certificate, configured by the engine setup:

"
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: ovirtsdk4.Error: Error while sending HTTP request: (60, 'SSL certificate problem: self signed certificate in certificate chain')
fatal: [192.168.0.200]: FAILED! => {"changed": false, "msg": "Error while sending HTTP request: (60, 'SSL certificate problem: self signed certificate in certificate chain')"}
"


I know this is a curl error. In the shell, the option -k or --insecure can be used. How to use that option in the ansible module?

Thanks in advance for any pointers on this!
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/E2UDQXVFBSON46URKKVWMC35SLTF7YK5/