Install NGINX App Protect task in NGINX Core Collection failing with 403 Forbidden about ansible-role-nginx-app-protect HOT 7 CLOSED

Hey @mashoodakram! Sorry to hear about your issue. The nginx_core collection is a little bit out of date and the NGINX repository endpoints have changed over the past few months. Could you please try cloning this role (or fetching the latest release via Ansible Galaxy) and seeing if that works? Molecule tests for the role are passing on GitHub (and locally), so I think that should fix your issue 😄

from ansible-role-nginx-app-protect.

Hi @alessfg so I cloned "https://github.com/nginxinc/ansible-collection-nginx.git" including the three roles and updated the nginx_core folder in our ADO repo where we have the collections folder this is where we run we run the roles\playbooks.

It's still failing I'm afraid with same error at the same task running core.nginx role.

2021-10-07T13:23:54.2870375Z TASK [nginxinc.nginx_core.nginx : (Debian/Ubuntu) Install dependencies] ********
2021-10-07T13:23:54.2871300Z Thursday 07 October 2021 13:23:54 +0000 (0:00:00.156) 0:03:49.194 ******
2021-10-07T13:23:54.2871873Z Thursday 07 October 2021 13:23:54 +0000 (0:00:00.156) 0:03:49.189 ******
2021-10-07T13:24:29.8326559Z fatal: [SECNGXDEVSR1004]: FAILED! => {"changed": false, "msg": "Failed to update apt cache: E:Failed to fetch https://app-protect-security-updates.nginx.com/ubuntu/dists/bionic/InRelease 403 Forbidden [IP: 52.59.52.27 443], E:The repository 'https://app-protect-security-updates.nginx.com/ubuntu bionic InRelease' is not signed."}
2021-10-07T13:24:31.7614118Z fatal: [SECNGXDEVSR1003]: FAILED! => {"changed": false, "msg": "Failed to update apt cache: E:Failed to fetch https://app-protect-security-updates.nginx.com/ubuntu/dists/bionic/InRelease 403 Forbidden [IP: 52.59.52.27 443], E:The repository 'https://app-protect-security-updates.nginx.com/ubuntu bionic InRelease' is not signed."}

Also as mentioned in the initial contact the first run did in fact run the nginx role and proceed to the nginx_app_protect role where it failed running the Install NGINX App Protect task.

So it's strange it got further during the first run and it's now failing much earlier any ideas what maybe causing the above error?

Which file can I check for the repository endpoints btw so can compare files with roles we have tried to update to latest.

thanks.

from ansible-role-nginx-app-protect.

You would need to clone or download this role -- ansible-role-nginx-app-protect -- not the collection.

The main issue, I think, is that those repositories no longer work (it could also be that your license has expired but I do not think that's the issue in this case). I do not know why your first run got farther ahead but my main suggestion stands. Run the role (not the role included in the collection) on a fresh install and see if that works.

from ansible-role-nginx-app-protect.

Hi @alessfg thanks so downloading the roles directly and replacing the ones in collection resolved the 403 errors and tasks completed until got to point when it's trying to connect to controller URL, which we discovered was not working but will raise separate issue. So is there any plans to update the collections roles seems if your using collections will end up with issue if and when we want to update collection?

from ansible-role-nginx-app-protect.

There are plans to update the collections in the next month. We are waiting for some releases to fall in place before we go all-in on that. I'm going to leave this issue open and change the name to make sure we don't lose track of it 😄

from ansible-role-nginx-app-protect.

Great thanks btw was getting same error in the nginx role so cloned both roles.

from ansible-role-nginx-app-protect.

The NGINX Core collection has been updated (https://github.com/nginxinc/ansible-collection-nginx). The latest release should address your issues!

from ansible-role-nginx-app-protect.