use rhel subs

Author: aknot242

README.md

@@ -129,6 +129,10 @@ This is a sample playbook file for using the role to install NGINX App Protect o
     # Removes the license (certificate and key) for the NGINX App Protect repositories on the target host(s) when playbook run is complete.
     app_protect_delete_license: true
 
+    # If you have a RHEL subscription, NGINX App Protect's dependencies will use subscription repos.
+    # Otherwise, it will source packages from CentOS' repositories.
+    app_protect_use_rhel_subscription_repos: true
+
     # For use with the app_protect_configure option to determine if the default security policy will be written to the target host
     # Used when `app_protect_configure: true`.
     app_protect_security_policy_template_enable: true

defaults/main.yml

@@ -26,6 +26,10 @@ app_protect_configure: false
 # Removes the license (certificate and key) for the NGINX App Protect repositories on the target host(s) when playbook run is complete.
 app_protect_delete_license: true
 
+# If you have a RHEL subscription, NGINX App Protect's dependencies will use subscription repos.
+# Otherwise, it will source packages from CentOS' repositories.
+app_protect_use_rhel_subscription_repos: true
+
 # Start/Restart NGINX service when App Protect related changes are complete.
 # Default is true.
 nginx_start: true

tasks/prerequisites/setup-redhat.yml

@@ -1,10 +1,17 @@
 ---
 - name: "(Install: RedHat) Install Required Dependencies - base"
-  yum:
+  package:
     name: ca-certificates,wget
     state: present
 
-- name: "(Install: RedHat) Install Required Dependencies - epel"
-  yum:
+- name: "(Install: RedHat) Install Required Dependencies - RHEL Subscription"
+  package:
+    name: rhel-7-server-optional-rpms,rhel-7-server-rpms
+    state: latest
+  when: app_protect_use_rhel_subscription_repos
+
+- name: "(Install: RedHat) Install Required Dependencies - Centos Epel"
+  package:
     name: "https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm"
     state: latest
+  when: not app_protect_use_rhel_subscription_repos