Update to 2022-09-08 18:00

roles/nomad/tasks/conf.yml

@@ -168,6 +168,6 @@
     - what: issuing_ca
       where: consul_ca.crt.tpl
   notify: restart consul-template-nomad
-  when: nomad_vault_secrets.consul_pki.enabled and nomad_conf.client.enabled and nomad_conf.consul.ssl
+  when: nomad_vault_secrets.consul_pki.enabled and nomad_conf.consul.ssl
   tags: nomad
 

roles/nomad/tasks/install.yml

@@ -49,6 +49,11 @@
     - name: Link in /usr/local/bin
       file: src={{ nomad_root_dir }}/bin/nomad dest=/usr/local/bin/nomad state=link force=True
 
+  tags: nomad
+
+- when: nomad_install_mode != 'none' and nomad_conf.client.enabled
+  block:
+
     - name: Download plugins
       get_url:
         url: "{{ nomad_plugins[item].archive_url }}"
@@ -101,7 +106,7 @@
     content: |
       complete -C {{ nomad_root_dir }}/bin/nomad nomad
     dest: /etc/bash_completion.d/nomad
-    mode: 755
+    mode: 0644
   tags: nomad
 
 - name: Deploy systemd service unit

roles/nomad/tasks/iptables.yml

@@ -6,10 +6,10 @@
     state: "{{ (('tcp' in nomad_services[item].proto or 'udp' in nomad_services[item].proto) and nomad_services[item].src_ip | length > 0) | ternary('present', 'absent') }}"
     rules: |
       {% if 'tcp' in nomad_services[item].proto %}
-      -A INPUT -m state --state NEW -p tcp --dport {{ nomad_services[item].port }} -s {{  nomad_services[item].src_ip | join(',') }} -j ACCEPT
+      -A INPUT -m state --state NEW -p tcp --dport {{ nomad_services[item].port }} -s {{  nomad_services[item].src_ip | flatten | join(',') }} -j ACCEPT
       {% endif %}
       {% if 'udp' in nomad_services[item].proto %}
-      -A INPUT -m state --state NEW -p udp --dport {{ nomad_services[item].port }} -s {{  nomad_services[item].src_ip | join(',') }} -j ACCEPT
+      -A INPUT -m state --state NEW -p udp --dport {{ nomad_services[item].port }} -s {{  nomad_services[item].src_ip | flatten | join(',') }} -j ACCEPT
       {% endif %}
   loop: "{{ nomad_services.keys() | list }}"
   tags: firewall,nomad