Fix filename/keyname;Disable jinja trim_blocks

ansible/roles/firstboot/files/ansible_payload/roles/metacluster/tasks/certauthority.yml

@@ -34,13 +34,15 @@
       kind: Secret
       metadata:
         name: step-certificates-certs
-        namespace: "{{ item }}"
+        namespace: "{{ item.namespace }}"
       data:
-        root_ca.crt: "{{ stepca_cm_certs.resources[0].data['root_ca.crt'] | b64encode }}"
+        "{{ item.key }}": "{{ stepca_cm_certs.resources[0].data['root_ca.crt'] | b64encode }}"
     kubeconfig: "{{ kubeconfig.path }}"
   loop:
-    - argo-cd
-    - kube-system
+    - namespace: argo-cd
+      key: custom-ca-certificates.crt
+    - namespace: kube-system
+      key: root_ca.crt
 
 - name: Configure step-ca passthrough ingress
   ansible.builtin.template:

ansible/roles/firstboot/files/ansible_payload/templates/applicationset.j2

@@ -12,7 +12,7 @@ spec:
       - path: metacluster-applicationset/*
   template:
     metadata:
-      name: {% raw %}'{{ path.basename }}'{% endraw %}
+      name: {% raw %}'{{ path.basename }}'{% endraw +%}
     spec:
       project: default
       syncPolicy:
@@ -22,7 +22,7 @@ spec:
       source:
         repoURL: https://git.{{ vapp['metacluster.fqdn'] }}/mc/ArgoCD.Config.git
         targetRevision: HEAD
-        path: {% raw %}'{{ path }}'{% endraw %}
+        path: {% raw %}'{{ path }}'{% endraw +%}
       destination:
         server: https://{{ vapp['guestinfo.ipaddress'] }}:6443
         namespace: default