add security upgrade flag to te jenkins plays

playbooks/edx-east/jenkins_admin.yml

@@ -5,6 +5,8 @@
   gather_facts: True
   vars:
     serial_count: 1
+    COMMON_SECURITY_UPDATES: yes
+    SECURITY_UPGRADE_ON_ANSIBLE: true
   serial: "{{ serial_count }}"
   roles:
     - aws

playbooks/edx-east/jenkins_testeng_master.yml

@@ -10,6 +10,8 @@
     COMMON_DATA_DIR: "/mnt2"
     COMMON_ENABLE_DATADOG: True
     COMMON_ENABLE_SPLUNKFORWARDER: True
+    COMMON_SECURITY_UPDATES: yes
+    SECURITY_UPGRADE_ON_ANSIBLE: true
     jenkins_jvm_args: "-Djava.awt.headless=true -Xmx8192m -XX:MaxPermSize=512m"
 
     SPLUNKFORWARDER_LOG_ITEMS:

playbooks/edx-east/jenkins_tools.yml

@@ -5,6 +5,8 @@
   gather_facts: True
   vars:
     serial_count: 1
+    COMMON_SECURITY_UPDATES: yes
+    SECURITY_UPGRADE_ON_ANSIBLE: true
   serial: "{{ serial_count }}"
   roles:
     - aws

playbooks/edx-east/jenkins_worker.yml

@@ -10,6 +10,8 @@
     mongo_enable_journal: False
     serial_count: 1
     platform_worker: True
+    COMMON_SECURITY_UPDATES: yes
+    SECURITY_UPGRADE_ON_ANSIBLE: true
   serial: "{{ serial_count }}"
   vars_files:
     - roles/edxapp/defaults/main.yml

playbooks/edx-east/jenkins_worker_android.yml

@@ -9,6 +9,8 @@
   vars:
     serial_count: 1
     android_worker: True
+    COMMON_SECURITY_UPDATES: yes
+    SECURITY_UPGRADE_ON_ANSIBLE: true
   serial: "{{ serial_count }}"
   roles:
     - aws

playbooks/edx-east/jenkins_worker_sitespeedio.yml

@@ -10,6 +10,8 @@
     mongo_enable_journal: False
     serial_count: 1
     sitespeed_worker: True
+    COMMON_SECURITY_UPDATES: yes
+    SECURITY_UPGRADE_ON_ANSIBLE: true
   serial: "{{ serial_count }}"
   vars_files:
     - roles/edxapp/defaults/main.yml