From 368d187b4a76bbd632a3faa5c3076d9cfdf6ae0e Mon Sep 17 00:00:00 2001
From: Daniel Pawlik <dpawlik@redhat.com>
Date: Mon, 15 Dec 2025 15:20:17 +0100
Subject: [PATCH] DNM Accept OCP cert before os-must-gather command

Currently in new OCP crc-cloud jobs, raises a strange log:

    gather logs unavailable:
    Get "https://192.168.126.11:10250/containerLogs/openshift-must-gather-hv57h/must-gather-r7j59/gather?follow=true&timestamps=true":
    remote error: tls: internal error

Accept the key before continue
---
 roles/os_must_gather/tasks/main.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/roles/os_must_gather/tasks/main.yml b/roles/os_must_gather/tasks/main.yml
index 7b578d5fab..5b76088446 100644
--- a/roles/os_must_gather/tasks/main.yml
+++ b/roles/os_must_gather/tasks/main.yml
@@ -49,6 +49,14 @@
     path: "{{ cifmw_openshift_kubeconfig | default(cifmw_os_must_gather_kubeconfig) }}"
   register: _kubeconfig_stat
 
+- name: Accept certificates before must gather
+  ansible.builtin.shell: |
+    oc adm certificate approve $(oc get csr --no-headers | awk '/Pending/ {print $1}')
+
+- name: Sleep a while
+  ansible.builtin.pause:
+    seconds: 30
+
 - name: Running openstack-must-gather tool
   when:
     - oc_installed is defined