Add download of CA certificate

roles/oneagent/tasks/provide-installer/signature-unix.yml

@@ -1,9 +1,23 @@
 ---
+- name: Check if CA certificate exists
+  delegate_to: localhost
+  ansible.builtin.stat:
+    path: "{{ oneagent_ca_cert_src_path }}"
+  register: _oneagent_ca_cert_state
+
 - name: Transfer CA certificate
   ansible.builtin.copy:
     src: "{{ oneagent_ca_cert_src_path }}"
     dest: "{{ oneagent_ca_cert_dest_path }}"
     mode: "0644"
+  when: _oneagent_ca_cert_state.stat.exists
+
+- name: Download CA certificate
+  ansible.builtin.get_url:
+    url: "{{ oneagent_ca_cert_download_url }}"
+    dest: "{{ oneagent_ca_cert_dest_path }}"
+    mode: "0644"
+  when: not _oneagent_ca_cert_state.stat.exists
 
 - name: Validate installer signature
   ansible.builtin.shell: >

roles/oneagent/vars/aix.yml

@@ -17,6 +17,7 @@ oneagent_uninstall_cmd: sh {{ oneagent_install_path }}/agent/uninstall.sh
 
 oneagent_ca_cert_src_path: files/dt-root.cert.pem
 oneagent_ca_cert_dest_path: "{{ oneagent_download_path }}/dt-root.cert.pem"
+oneagent_ca_cert_download_url: https://ca.dynatrace.com/dt-root.cert.pem
 oneagent_certificate_verification_header: >
   "Content-Type: multipart/signed; protocol=\"application/x-pkcs7-signature\"; micalg=\"sha-256\"; boundary=\"--SIGNED-INSTALLER\"\
   \n\n----SIGNED-INSTALLER\n"

roles/oneagent/vars/linux.yml

@@ -18,6 +18,7 @@ oneagent_uninstall_cmd: sh {{ oneagent_install_path }}/agent/uninstall.sh
 
 oneagent_ca_cert_src_path: files/dt-root.cert.pem
 oneagent_ca_cert_dest_path: "{{ oneagent_download_path }}/dt-root.cert.pem"
+oneagent_ca_cert_download_url: https://ca.dynatrace.com/dt-root.cert.pem
 oneagent_certificate_verification_header: >
   "Content-Type: multipart/signed; protocol=\"application/x-pkcs7-signature\"; micalg=\"sha-256\"; boundary=\"--SIGNED-INSTALLER\"\
   \n\n----SIGNED-INSTALLER\n"