feat: multiple fixes and enhancements

tasks/hydra-saml.yml

@@ -13,11 +13,14 @@
   template:
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
+    mode: "{{ item.mode }}"
   with_items:
     - src:  cadoles-pod-hydra-remote-user-v1.conf.j2
       dest: /etc/cadoles-pod-hydra-remote-user-v1.conf
+      mode: u=rw,g=r
     - src:  hydra-remote-user.yml.j2
       dest: /etc/hydra-remote-user/conf.d/remote-user.yml
+      mode: u=rw,g=r,o=r
   notify:
     - Restart cadoles-pod-hydra-remote-user-v1
   become: true
@@ -43,11 +46,17 @@
   ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
+    mode: "{{ item.mode }}"
   with_items:
     - src:  cadoles-pod-shibboleth-sp-v3.conf.j2
       dest: /etc/cadoles-pod-shibboleth-sp-v3.conf
+      mode: u=rw,g=r,o=r
     - src:  shibboleth-attribute-map.inc.xml.j2
       dest: /etc/shibboleth/attribute-map.inc.xml
+      mode: u=rw,g=r,o=r
+    - src:  shibboleth-attribute-policy.inc.xml.j2
+      dest: /etc/shibboleth/attribute-policy.inc.xml
+      mode: u=rw,g=r,o=r
   notify:
     - Restart cadoles-pod-shibboleth-sp-v3
   become: true

tasks/main.yml

@@ -75,11 +75,14 @@
   template:
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
+    mode: "{{ item.mode }}"
   with_items:
     - src:  cadoles-pod-hydra-dispatcher-v1.conf.j2
       dest: /etc/cadoles-pod-hydra-dispatcher-v1.conf
+      mode: u=rw,g=r
     - src:  hydra-dispatcher-apps.yml.j2
       dest: /etc/hydra-dispatcher/conf.d/apps.yml
+      mode: u=rw,g=r,o=r
   notify:
     - Restart cadoles-pod-hydra-dispatcher-v1
   become: true

tasks/stop-oidc-test.yml

@@ -1,4 +1,4 @@
-- name: Create oidc-test OpenID Connect client configuration
+- name: Remove oidc-test OpenID Connect client configuration
   file:
     path: "/etc/hydra/clients.d/{{ oidc_test_app_client_id }}.json"
     state: absent