- name: "tsg-diagnose: rsync badssl ca certs"
  shell: rsync -avzP --delete 192.168.100.1::blade0toother /tmp/sync/

- name: "tsg-diagnose: add badssl ca file to tfe tls-ca-bundle"
  shell: cat /tmp/sync/ca-root.crt > /opt/tsg/tfe/resource/tfe/tsg_diagnose_ca.pem && cat /tmp/sync/wpr_cert.pem >> /opt/tsg/tfe/resource/tfe/tsg_diagnose_ca.pem