k3s token now templated into terraform vars

Author: wtripp180901

ansible/roles/passwords/defaults/main.yml

@@ -12,4 +12,7 @@ slurm_appliance_secrets:
 secrets_openhpc_mungekey_default:
   content: "{{ lookup('pipe', 'dd if=/dev/urandom bs=1 count=1024 2>/dev/null | base64') }}"
 
+k3s_secrets:
+  k3s_token: "{{ lookup('ansible.builtin.password', '/dev/null', length=64) }}"
+
 openhpc_passwords_output_path: "{{ lookup('env', 'APPLIANCES_ENVIRONMENT_ROOT') | default(undefined, true) | mandatory('You must define the APPLIANCES_ENVIRONMENT_ROOT environment variable') }}/inventory/group_vars/all/secrets.yml"

ansible/roles/passwords/tasks/main.yml

@@ -7,17 +7,12 @@
   delegate_to: localhost
   run_once: true
 
-- name: Generate k3s token
-  ansible.builtin.set_fact:
-    k3s_token_secret: ""
-
 - name:  Generate k3s token and add to terraform
-  vars:
-    token: "{{ lookup('ansible.builtin.password', '/dev/null', length=64) }}"
-  replace:
-    path: "{{ lookup('env', 'APPLIANCES_ENVIRONMENT_ROOT') }}/terraform/variables.tf"
-    regexp: "k3s_token_replace_me"
-    replace: "{{ token }}"
+  template:
+    src: k3s-token.auto.tfvars.json
+    dest: "{{ lookup('env', 'APPLIANCES_ENVIRONMENT_ROOT') }}/terraform/k3s-token.auto.tfvars.json"
+  delegate_to: localhost
+  run_once: true
 
 
 # - name: Ensure munge key directory exists

ansible/roles/passwords/templates/k3s-token.auto.tfvars.json

@@ -0,0 +1 @@
+{{ k3s_secrets | to_nice_json }}

environments/skeleton/{{cookiecutter.environment}}/terraform/compute/variables.tf

@@ -69,6 +69,5 @@ variable "security_group_ids" {
 }
 
 variable "k3s_token" {
-    description = "Random cryptographically secure string for K3s token (must be set by ../compute.tf)"
     type = string
 }

environments/skeleton/{{cookiecutter.environment}}/terraform/variables.tf

@@ -133,7 +133,5 @@ variable "root_volume_size" {
 }
 
 variable "k3s_token" {
-    description = "Random cryptographically secure string for K3s token"
     type = string
-    default = "k3s_token_replace_me"
 }