We rolled-out the changes (server side) for the new TLS certs issued by new RHCSv2 / RH CA service last week.

We are already trusting the new RH CA on all CentOS Stream infra but it seems that some roles were written with "fixed values" instead of relying on what's deployed by ansible in the infra.

Example : https://github.com/CentOS/ansible-role-odcs-backend/blob/master/templates/etc/koji.conf.d/odcs.conf.j2#L33

So we'll just have to modify the role to use variables coming from inventory like the rest of the baseline role that is deployed everywhere