feat: Add VFIO binding script and update playbook for enhanced virtualization support

ansible/roles/cis/tasks/password.yml

@@ -135,6 +135,14 @@
         - password-auth
         - pam
 
+    - name: Check if sssd-shadowutils exists
+      ansible.builtin.stat:
+        path: /etc/pam.d/sssd-shadowutils
+      register: sssd_shadowutils
+      tags:
+        - sssd-shadowutils
+        - pam
+
     - name: Remove nullok from sssd-shadowutils
       become: true
       ansible.builtin.replace:
@@ -143,6 +151,7 @@
         mode: "0644"
         owner: root
         group: root
+      when: sssd_shadowutils.stat.exists
       tags:
         - sssd-shadowutils
         - pam

ansible/roles/cis/tasks/sshconfig.yml

@@ -12,7 +12,7 @@
 
 - name: Set ssh version as fact
   ansible.builtin.set_fact:
-    ssh_installed_version: "{{ ssh_version.stderr | regex_search('^OpenSSH_([0-9+].[0-9]+)', '\\1') | join('.') | float }}" # noqa jinja[spacing]
+    ssh_installed_version: "{{ ssh_version.stderr | regex_search('^OpenSSH_([0-9]+.[0-9]+).', '\\1') | join('.') | float }}" # noqa jinja[spacing]
   when: ssh_version.stderr != ""
   tags:
     - roles::cis::sshd

ansible/roles/microk8s/tasks/certmanager.yml

@@ -17,8 +17,8 @@
 
 - name: CertManager | LetsEncrypt DNS-01 issuer
   ansible.builtin.include_tasks: issuers/dns-01.yml
-  when: microk8s_certmgr_letsencrypt_dns01 is true
+  when: microk8s_certmgr_letsencrypt_dns01
 
 - name: CertManager | LetsEncrypt HTTP-01 issuer
   ansible.builtin.include_tasks: issuers/http-01.yml
-  when: microk8s_certmgr_letsencrypt_http01 is true
+  when: microk8s_certmgr_letsencrypt_http01

ansible/roles/microk8s/tasks/issuers/providers/cloudns.yml

@@ -32,4 +32,8 @@
     state: present
     kubeconfig: "{{ k8s_kubeconfig }}"
     src: "{{ k8s_etc }}/k8s-certmanager-cloudns.yaml"
-    wait: true
+
+- name: CertManager | Sleep to allow webhook to be ready
+  ansible.builtin.pause:
+    seconds: 15
+  when: microk8s_certmgr_letsencrypt_dns01

ansible/roles/microk8s/tasks/main.yml

@@ -61,11 +61,6 @@
     - k8s::install
     - k8s::kubectl
 
-- name: Setup LoadBalancer
-  ansible.builtin.include_tasks: loadbalancer.yml
-  tags:
-    - k8s::loadbalancer
-
 - name: Setup CertManager
   ansible.builtin.include_tasks: certmanager.yml
   tags: