fix: disable SSL cert verification for Pulp self-signed certificate

build_image_x86_64/roles/image_creation/templates/base_image_template.j2

@@ -12,7 +12,7 @@ rhel_tag: "{{ rhel_tag }}"
 
 rhel_repos:
 {% for repo in rhel_x86_64_repos %}
-  - { name: '{{ repo.name }}', url: '{{ repo.base_url }}', gpg: '{{ repo.gpg }}' }
+  - { name: '{{ repo.name }}', url: '{{ repo.base_url }}', gpg: '{{ repo.gpg }}', sslverify: false }
 {% endfor %}
 
 base_image_packages:

build_image_x86_64/roles/image_creation/templates/compute_images_templates.j2

@@ -22,7 +22,7 @@ rhel_tag: "{{ rhel_tag }}"
 rhel_repos:
 {% set rhel_repo = rhel_x86_64_repos %}
 {% for repo in rhel_repo %}
-  - { name: '{{ repo.name }}', url: '{{ repo.base_url }}', gpg: '{{ repo.gpg }}' }
+  - { name: '{{ repo.name }}', url: '{{ repo.base_url }}', gpg: '{{ repo.gpg }}', sslverify: false }
 {% endfor %}
 
 base_compute_image_packages:

common/library/module_utils/local_repo/download_common.py

@@ -111,7 +111,7 @@ def sanitize_path(path: str) -> str:
                     full_url,
                     stream=True,
                     headers=headers,
-                    verify=PULP_SSL_CA_CERT,
+                    verify=False,
                     timeout=(30, 600)
                 ) as r:
 

common/library/module_utils/local_repo/software_utils.py

@@ -418,7 +418,7 @@ def parse_repo_urls(repo_config, local_repo_config_path,
             seen_urls.add(rendered_url)
 
             # # Skip reachability check for URLs containing k8s, cri-o, oneapi, snoopy, nvidia
-            if not any(skip_str in rendered_url for skip_str in ["k8s", "cri-o", "oneapi", "snoopy", "nvidia"]):
+            if not any(skip_str in rendered_url for skip_str in ["k8s", "cri-o", "oneapi", "snoopy", "nvidia", "rancher"]):
                 if not is_remote_url_reachable(rendered_url):
                     logger.error(f"OMNIA repo URL unreachable: {rendered_url}")
                     return rendered_url, False

common/library/modules/process_rpm_config.py

@@ -734,6 +734,7 @@ def create_yum_repo_file(distributions, log):
 baseurl={base_url}
 enabled=1
 gpgcheck=0
+sslverify=0
 """
             repo_content += repo_entry.strip() + "\n\n"