don't use /root path

Author: Arvind Jangir

.github/workflows/test.yml

@@ -456,7 +456,7 @@ jobs:
         run: |
           ./foremanctl deploy-proxy \
             --flavor foreman-proxy-content \
-            --certificate-bundle /root/proxy.example.com.tar.gz \
+            --certificate-bundle $(pwd)/.var/lib/foremanctl/proxy.example.com.tar.gz \
             --foreman-fqdn quadlet.example.com
       - name: Run tests
         run: |

src/playbooks/prepare-proxy/metadata.obsah.yaml

@@ -6,4 +6,3 @@ variables:
   hostname:
     parameter: hostname
     help: FQDN of the proxy host to prepare.
-    required: true

src/playbooks/prepare-proxy/prepare-proxy.yaml

@@ -31,7 +31,6 @@
         groups: proxy
         ansible_connection: ssh
         ansible_host: "{{ hostname }}"
-        ansible_user: "{{ proxy_ssh_user | default('root') }}"
         inventory_dir: "{{ inventory_dir }}"
 
 - name: Transfer proxy certificate bundle and oauth credentials to proxy host
@@ -46,23 +45,23 @@
     - name: Copy certificate bundle to proxy
       ansible.builtin.copy:
         src: "{{ obsah_state_path }}/{{ hostname }}.tar.gz"
-        dest: "/root/{{ hostname }}.tar.gz"
+        dest: "/tmp/{{ hostname }}.tar.gz"
         mode: "0600"
         owner: root
         group: root
 
     - name: Copy OAuth consumer key to proxy
       ansible.builtin.copy:
         src: "{{ foreman_oauth_consumer_key_file }}"
-        dest: "/root/foreman-oauth-consumer-key"
+        dest: "{{ obsah_state_path }}/foreman-oauth-consumer-key"
         mode: "0600"
         owner: root
         group: root
 
     - name: Copy OAuth consumer secret to proxy
       ansible.builtin.copy:
         src: "{{ foreman_oauth_consumer_secret_file }}"
-        dest: "/root/foreman-oauth-consumer-secret"
+        dest: "{{ obsah_state_path }}/foreman-oauth-consumer-secret"
         mode: "0600"
         owner: root
         group: root

src/roles/certificates/tasks/extract.yml

@@ -4,6 +4,7 @@
     path: "{{ certificates_bundle }}"
   register: _certificates_tar_file_path
   delegate_to: localhost
+  become: false
 
 - name: Fail if path to certificate tar file does not exist
   ansible.builtin.fail:

src/roles/pre_install/tasks/foreman-proxy-content.yaml

@@ -1,7 +1,7 @@
 ---
 - name: Read OAuth consumer key from file
   ansible.builtin.slurp:
-    src: /root/foreman-oauth-consumer-key
+    src: "{{ obsah_state_path }}/foreman-oauth-consumer-key"
   register: _oauth_key_file
 
 - name: Set OAuth consumer key
@@ -10,7 +10,7 @@
 
 - name: Read OAuth consumer secret from file
   ansible.builtin.slurp:
-    src: /root/foreman-oauth-consumer-secret
+    src: "{{ obsah_state_path }}/foreman-oauth-consumer-secret"
   register: _oauth_secret_file
 
 - name: Set OAuth consumer secret