certificates: tweak example config

Exclusive certificate setup is disabled by default so no change in functionality but if enabled then by default preserve the Katello certificate if present.
myllynen · Dec 18, 2024 · 53c802e · 53c802e
1 parent 01ce576
commit 53c802e
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/configure_rhel.yml b/configure_rhel.yml
@@ -248,7 +248,7 @@
     # List of additionally recognized cert files
     # NB. Ensure these files are trustworthy!
     certificates_files_known:
-    #  - /etc/pki/ca-trust/source/anchors/old.pem
+      - /etc/pki/ca-trust/source/anchors/katello-server-ca.pem
 
     #
     # dns_cache

diff --git a/roles/certificates/README.md b/roles/certificates/README.md
@@ -39,7 +39,7 @@ certificates_exclusive: false
 # List of additionally recognized cert files
 # NB. Ensure these files are trustworthy!
 certificates_files_known:
-#  - /etc/pki/ca-trust/source/anchors/old.pem
+  - /etc/pki/ca-trust/source/anchors/katello-server-ca.pem
 </pre>
 
 ## License

diff --git a/roles/certificates/defaults/main.yml b/roles/certificates/defaults/main.yml
@@ -28,4 +28,4 @@ certificates_exclusive: false
 # List of additionally recognized cert files
 # NB. Ensure these files are trustworthy!
 certificates_files_known:
-#  - /etc/pki/ca-trust/source/anchors/old.pem
+  - /etc/pki/ca-trust/source/anchors/katello-server-ca.pem