openqa/worker tap: set CAP_NET_ADMIN on qemu

I have no idea why we didn't need this before, but we seem to
need it now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>

roles/openqa/worker/tasks/tap-setup.yml

@@ -18,6 +18,12 @@
 - name: Enable ipv4_forward in sysctl
   sysctl: name=net.ipv4.ip_forward value=1 state=present sysctl_set=yes reload=yes
 
+- name: Set CAP_NET_ADMIN for qemu (needed for it to control tap devices)
+  community.general.capabilities:
+    path: "/usr/bin/qemu-system-{{ ansible_architecture }}"
+    capability: cap_net_admin+ep
+    state: present
+
 - name: Start openvswitch service
   service: name=openvswitch enabled=yes state=started