allow disabling proxy features

Author: evgeni

src/roles/foreman_proxy/defaults/main.yaml

@@ -7,7 +7,10 @@ foreman_proxy_url: "https://{{ foreman_proxy_name }}:{{ foreman_proxy_https_port
 foreman_proxy_trusted_hosts:
   - "{{ foreman_proxy_name }}"
 
+foreman_proxy_known_feautures:
+  - remote_execution_ssh
 foreman_proxy_base_feautures:
   - logs
 foreman_proxy_plugins: []
 foreman_proxy_features: "{{ foreman_proxy_base_feautures + foreman_proxy_plugins }}"
+foreman_proxy_disabled_features: "{{ foreman_proxy_known_feautures | difference(foreman_proxy_features) }}"

src/roles/foreman_proxy/tasks/feature.yaml

@@ -24,6 +24,7 @@
 - name: Include additional tasks for {{ feature_name }}
   ansible.builtin.include_tasks: '{{ tasks_file }}'
   when:
+    - feature_enabled != "false"
     - tasks_file is not none
     - tasks_file != ""
   vars:

src/roles/foreman_proxy/tasks/main.yaml

@@ -44,10 +44,20 @@
 
 - name: Configure features
   ansible.builtin.include_tasks: feature.yaml
+  vars:
+    feature_enabled: "true"
   loop: "{{ foreman_proxy_features }}"
   loop_control:
     loop_var: feature_name
 
+- name: Disable features
+  ansible.builtin.include_tasks: feature.yaml
+  vars:
+    feature_enabled: "false"
+  loop: "{{ foreman_proxy_disabled_features }}"
+  loop_control:
+    loop_var: feature_name
+
 - name: Run daemon reload to make Quadlet create the service files
   ansible.builtin.systemd:
     daemon_reload: true

src/roles/foreman_proxy/templates/settings.d/logs.yml.j2

@@ -1,2 +1,2 @@
 ---
-:enabled: https
+:enabled: {{ feature_enabled }}

src/roles/foreman_proxy/templates/settings.d/remote_execution_ssh.yml.j2

@@ -1,5 +1,5 @@
 ---
-:enabled: true
+:enabled: {{ feature_enabled }}
 :ssh_identity_key_file: '~/.ssh/id_rsa_foreman_proxy'
 :local_working_dir: '/var/tmp'
 :remote_working_dir: '/var/tmp'