---
- name: Make sure the folder exists (Red Hat)
  ansible.builtin.file:
    path: /etc/pki/ca-trust/source/anchors
    state: directory
    owner: root
    group: root
    mode: "0755"

- name: Copy PEM into folder (Red Hat)
  ansible.builtin.copy:
    src: "{{ install_root_cert_pem }}"
    dest: "/etc/pki/ca-trust/source/anchors/{{ install_root_cert_pem | basename }}"
    owner: root
    group: root
    mode: "0644"
  register: result

- name: Update CA Trust (Red Hat)
  ansible.builtin.command: update-ca-trust
  when: result is changed

- name: Update CA Trust (Red Hat < 7)
  ansible.builtin.command: update-ca-trust enable
  when:
    - result is changed
    - ansible_distribution_version|int < 7