Refactor templating #3

ansible/vars/metacluster.yml

@@ -20,8 +20,7 @@ components:
       version: 1.3.0
       chart: longhorn/longhorn
       parse_logic: cat values.yaml | yq eval '.. | select(has("repository")) | .repository + ":" + .tag'
-      chart_values: |
+      chart_values: !unsafe |
-        {% raw %}
         defaultSettings:
           defaultDataPath: /mnt/blockstorage
           defaultReplicaCount: 1
@@ -30,15 +29,13 @@ components:
           host: storage.{{ vapp['metacluster.fqdn'] }}
         persistence:
           defaultClassReplicaCount: 1
-        {% endraw %}
 
   harbor:
     helm:
       version: 1.9.1  # (= Harbor v2.5.1)
       chart: harbor/harbor
       parse_logic: helm template . | yq --no-doc eval '.. | .image? | select(.)' | sort -u | awk '!/ /'
-      chart_values: |
+      chart_values: !unsafe |
-        {% raw %}
         expose:
           ingress:
             hosts:
@@ -47,15 +44,13 @@ components:
         harborAdminPassword: "{{ vapp['guestinfo.rootpw'] }}"
         notary:
           enabled: false
-        {% endraw %}
 
   gitea:
     helm:
       version: v5.0.9 # (= Gitea v1.16.8)
       chart: gitea-charts/gitea
       parse_logic: helm template . | yq --no-doc eval '.. | .image? | select(.)' | sort -u | sed '/:/!s/$/:latest/'
-      chart_values: |
+      chart_values: !unsafe |
-        {% raw %}
         gitea:
           admin:
             username: administrator
@@ -70,15 +65,13 @@ components:
               paths:
                 - path: /
                   pathType: Prefix
-        {% endraw %}
 
   argo-cd:
     helm:
       version: 4.9.7  # (= ArgoCD v2.4.2)
       chart: argo/argo-cd
       parse_logic: helm template . | yq --no-doc eval '.. | .image? | select(.)' | sort -u | awk '!/ /'
-      chart_values: |
+      chart_values: !unsafe |
-        {% raw %}
         server:
           extraArgs:
             - --insecure
@@ -89,7 +82,6 @@ components:
         configs:
           secret:
             argocdServerAdminPassword: "{{ vapp['guestinfo.rootpw'] | password_hash('bcrypt') }}"
-        {% endraw %}
 
 dependencies: