ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/certauthority.yml

@@ -1,12 +1,10 @@
 - block:
 
-    - name: Import generated values file into dictionary and combine with custom values
-      ansible.builtin.set_fact:
-        values_initial: |
-          {{
-            lookup('ansible.builtin.file', stepconfig.path) | from_yaml |
-            combine( components['step-certificates'].chart_values | from_yaml, recursive=True, list_merge='append')
-          }}
+    - name: Inject password into values file
+      ansible.builtin.copy:
+        dest: "{{ stepconfig.path }}"
+        content: "{{ lookup('ansible.builtin.file', stepconfig.path) | regex_replace('(ca_password|provisioner_password):[ ]?\n', '\\1: ' ~ (vapp['metacluster.password'] | b64encode) ~ '\n') }}"
+      no_log: true
 
     - name: Install step-ca chart
       kubernetes.core.helm:

ansible/roles/os/tasks/packages.yml

@@ -37,7 +37,7 @@
     state: directory
 
 - name: Configure Ansible defaults
-  ansible.builtin.copy:
+  ansible.builtin.template:
     dest: /etc/ansible/ansible.cfg
     content: |
       [defaults]