From 14d11cc180e3bfb0e97072f76e90cd87c5699cde Mon Sep 17 00:00:00 2001
From: reyesj2 <94730068+reyesj2@users.noreply.github.com>
Date: Fri, 24 Jul 2026 16:59:42 -0500
Subject: [PATCH] add sslverify=0 to minion repo config. Updates are pulled
 from the manager hosted repo

---
 salt/repo/client/oracle.sls | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/salt/repo/client/oracle.sls b/salt/repo/client/oracle.sls
index bf0a02751..bb4316879 100644
--- a/salt/repo/client/oracle.sls
+++ b/salt/repo/client/oracle.sls
@@ -60,6 +60,9 @@ so_repo:
   {% endif %}
     - enabled: 1
     - gpgcheck: 1
+  {% if not GLOBALS.is_manager %}
+    - sslverify: 0
+  {% endif %}
 
 # Only assign the kernel repo once this node's running salt matches the version this
 # SO release ships. During a soup the grid is mid-salt-upgrade; gating here keeps the
@@ -77,6 +80,9 @@ so_kernel_repo:
   {% endif %}
     - enabled: 1
     - gpgcheck: 1
+  {% if not GLOBALS.is_manager %}
+    - sslverify: 0
+  {% endif %}
     # Supplementary kernel repo: tolerate it being empty/unreachable (e.g. before the
     # manager has populated /nsm/kernelrepo) so a missing repomd.xml can't make every
     # dnf/pkg operation on the grid fail.