Pin ansible to less than 2.10.0

The move to collection based community modules is currently not
compatable with the call to ipa_role.  This pins the ansible version
to a working version.

Change-Id: Ie495f8110245d723180bd57a572687c0b22166b0
Closes-Bug: 1901547

Fix gpg error when installing container.io

This change fixes the following error while manually installing
container.io:
"Failed to validate GPG signature for containerd.io"

Change-Id: I7ea0e55044d63d08206adb29905403982c7b13f8

ansible-requirements.txt

@@ -1 +1 @@
-ansible>=2.8
+ansible>=2.8, <2.10.0

molecule-requirements.txt

@@ -1,4 +1,4 @@
-ansible
+ansible>=2.8, <2.10.0
 docker
 molecule>=3.0,<3.1
 testinfra

tripleo_ipa/roles/tripleo_ipa_setup/tasks/setup.yml

@@ -50,7 +50,7 @@
       - 'Retrieve Certificates from the CA'
 
 # unfortunately we don't have ansible module yet to create perms
-- name: add nova host managedment permissions
+- name: add nova host management permissions
   shell: |
     ipa permission-find "{{ item.name }}"
     if [ $? -ne 0 ]; then

zuul.d/playbooks/pre.yml

@@ -34,10 +34,16 @@
 
     # NOTE(cloudnull): This is being done because docker is not supported on RHEL-8
     #                  and tests within this repo still require docker.
-    - name: Manually install containerd.io
+    - name: Install gpg/container.io rpm
       become: true
-      package:
-        name: https://download.docker.com/linux/centos/7/x86_64/stable/Packages/containerd.io-1.2.6-3.3.el7.x86_64.rpm
+      block:
+        - name: Import GPG key from docker.com
+          rpm_key:
+            state: present
+            key: https://download.docker.com/linux/centos/gpg
+        - name: Manually install containerd.io
+          package:
+            name: https://download.docker.com/linux/centos/7/x86_64/stable/Packages/containerd.io-1.2.6-3.3.el7.x86_64.rpm
       when:
         - (ansible_distribution_major_version | int) >= 8
   roles: