fix export.yml for inactive configs

Author: bertiethorpe

ansible/roles/compute_init/files/compute-init.yml

@@ -9,6 +9,7 @@
     enable_compute: "{{ os_metadata.meta.compute | default(false) | bool }}"
     enable_resolv_conf: "{{ os_metadata.meta.resolv_conf | default(false) | bool }}"
     enable_etc_hosts: "{{ os_metadata.meta.etc_hosts | default(false) | bool }}"
+    enable_sssd: "{{ os_metadata.meta.sssd | default(false) | bool }}"
     enable_tuned:  "{{ os_metadata.meta.tuned | default(false) | bool }}"
     enable_nfs: "{{ os_metadata.meta.nfs | default(false) | bool }}"
     enable_manila: "{{ os_metadata.meta.manila | default(false) | bool }}"
@@ -140,9 +141,12 @@
     - name: Configure sssd
       block:
         - name: Manage sssd.conf configuration
-          copy:
-            src: "/exports/cluster/hostconfig/{{ ansible_hostname }}/sssd.conf"
+          ansible.builtin.template:
+            src: "/mnt/cluster/hostconfig/{{ ansible_hostname }}/sssd.conf.j2"
             dest: "{{ sssd_conf_dest }}"
+            owner: root
+            group: root
+            mode: "0600"
 
         - name: Restart sssd
           systemd:

ansible/roles/compute_init/tasks/export.yml

@@ -82,15 +82,17 @@
   delegate_to: "{{ groups['control'] | first }}"
 
 - name: Inject host specific config template files
-  template:
+  copy:
     src: "{{ item.src }}"
     dest: "/exports/cluster/hostconfig/{{ inventory_hostname }}/{{ item.dest }}"
     owner: root
     group: root
     mode: u=rw,go=
   loop:
-    - src: "{{ sssd_conf_src }}"
-      dest: sssd.conf
-    - src: "{{ sshd_conf_src }}"
-      dest: sshd.conf
-  delegate_to: "{{ groups['control'] | first }}"
+    - src: "{{ sssd_conf_src | default('') }}"
+      dest: sssd.conf.j2
+    - src: "{{ sshd_conf_src | default('') }}"
+      dest: sshd.conf.j2
+  when:
+    - item.src != ''
+  delegate_to: "{{ groups['control'] | first }}"