feat: move sops rename/restore to a ansible task

Signed-off-by: Devin Buhl <devin@buhl.casa>

bootstrap/tasks/addons/csi_driver_nfs.yaml

@@ -23,15 +23,9 @@
 # https://github.com/ansible-collections/community.sops/issues/153
 - name: Template encrypted files for {{ addon_namespace }}/{{ addon_name }}
   block:
-    - name: Rename Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml"
-        dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0644"
-    - name: Remove Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml"
-        state: absent
+    - name: Disable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/disable.yaml
     - name: Template encrypted files
       when: item.state == 'file' and 'sops' in item.path
       community.sops.sops_encrypt:
@@ -42,22 +36,10 @@
         mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml
   rescue:
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml

bootstrap/tasks/addons/grafana.yaml

@@ -23,15 +23,9 @@
 # https://github.com/ansible-collections/community.sops/issues/153
 - name: Template encrypted files for {{ addon_namespace }}/{{ addon_name }}
   block:
-    - name: Rename Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml"
-        dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0644"
-    - name: Remove Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml"
-        state: absent
+    - name: Disable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/disable.yaml
     - name: Template encrypted files
       when: item.state == 'file' and 'sops' in item.path
       community.sops.sops_encrypt:
@@ -42,22 +36,10 @@
         mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml
   rescue:
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml

bootstrap/tasks/addons/hajimari.yaml

@@ -23,15 +23,9 @@
 # https://github.com/ansible-collections/community.sops/issues/153
 - name: Template encrypted files for {{ addon_namespace }}/{{ addon_name }}
   block:
-    - name: Rename Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml"
-        dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0644"
-    - name: Remove Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml"
-        state: absent
+    - name: Disable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/disable.yaml
     - name: Template encrypted files
       when: item.state == 'file' and 'sops' in item.path
       community.sops.sops_encrypt:
@@ -42,22 +36,10 @@
         mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml
   rescue:
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml

bootstrap/tasks/addons/kube_prometheus_stack.yaml

@@ -23,15 +23,9 @@
 # https://github.com/ansible-collections/community.sops/issues/153
 - name: Template encrypted files for {{ addon_namespace }}/{{ addon_name }}
   block:
-    - name: Rename Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml"
-        dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0644"
-    - name: Remove Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml"
-        state: absent
+    - name: Disable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/disable.yaml
     - name: Template encrypted files
       when: item.state == 'file' and 'sops' in item.path
       community.sops.sops_encrypt:
@@ -42,22 +36,10 @@
         mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml
   rescue:
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml

bootstrap/tasks/addons/kubernetes_dashboard.yaml

@@ -23,15 +23,9 @@
 # https://github.com/ansible-collections/community.sops/issues/153
 - name: Template encrypted files for {{ addon_namespace }}/{{ addon_name }}
   block:
-    - name: Rename Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml"
-        dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0644"
-    - name: Remove Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml"
-        state: absent
+    - name: Disable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/disable.yaml
     - name: Template encrypted files
       when: item.state == 'file' and 'sops' in item.path
       community.sops.sops_encrypt:
@@ -42,22 +36,10 @@
         mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml
   rescue:
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml

bootstrap/tasks/addons/system_upgrade_controller.yaml

@@ -23,15 +23,9 @@
 # https://github.com/ansible-collections/community.sops/issues/153
 - name: Template encrypted files for {{ addon_namespace }}/{{ addon_name }}
   block:
-    - name: Rename Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml"
-        dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0644"
-    - name: Remove Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml"
-        state: absent
+    - name: Disable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/disable.yaml
     - name: Template encrypted files
       when: item.state == 'file' and 'sops' in item.path
       community.sops.sops_encrypt:
@@ -42,22 +36,10 @@
         mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml
   rescue:
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml

bootstrap/tasks/addons/weave_gitops.yaml

@@ -23,15 +23,9 @@
 # https://github.com/ansible-collections/community.sops/issues/153
 - name: Template encrypted files for {{ addon_namespace }}/{{ addon_name }}
   block:
-    - name: Rename Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml"
-        dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0644"
-    - name: Remove Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml"
-        state: absent
+    - name: Disable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/disable.yaml
     - name: Template encrypted files
       when: item.state == 'file' and 'sops' in item.path
       community.sops.sops_encrypt:
@@ -42,22 +36,10 @@
         mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml
   rescue:
-    - name: Restore Sops configuration file
-      ansible.builtin.copy:
-        src: "{{ repository_path }}/.sops.yaml.orig"
-        dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0644"
-    - name: Remove backed up Sops configuration file
-      ansible.builtin.file:
-        path: "{{ repository_path }}/.sops.yaml.orig"
-        state: absent
+    - name: Enable Sops config
+      ansible.builtin.include_tasks:
+        file: ../sops/enable.yaml