From abc807a70a5baf62ab34094b9c243a525ab0fe30 Mon Sep 17 00:00:00 2001
From: Kevin Carter <kecarter@redhat.com>
Date: Tue, 17 Dec 2019 15:51:15 -0600
Subject: [PATCH] Add option to enable / disable the template engine

This change allows a deployer to selectively enable or disable the
template engine. This will allow folks to override the contents of
a configuration file via the `config_overrides` option but not render
any jinja related content within the file, except for what is provided
by the `config_overrides` option.

Change-Id: If226b4814a88b3bd7968b5e2ef64474710665ae0
Signed-off-by: Kevin Carter <kecarter@redhat.com>
---
 action/config_template.py | 35 +++++++++++++++++------------------
 library/config_template   | 10 +++++++++-
 2 files changed, 26 insertions(+), 19 deletions(-)

diff --git a/action/config_template.py b/action/config_template.py
index 843ff9e..fdc0f68 100644
--- a/action/config_template.py
+++ b/action/config_template.py
@@ -769,6 +769,17 @@ class ActionModule(ActionBase):
 
         return return_dict
 
+    def _check_templar(self, data):
+        if boolean(self._task.args.get('render_template', True)):
+            return self._templar.template(
+                data,
+                preserve_trailing_newlines=True,
+                escape_backslashes=False,
+                convert_data=False
+            )
+        else:
+            return data
+
     def run(self, tmp=None, task_vars=None):
         """Run the method"""
 
@@ -855,12 +866,7 @@ class ActionModule(ActionBase):
 
         self._templar.environment.loader.searchpath = _vars['searchpath']
         self._templar.set_available_variables(temp_vars)
-        resultant = self._templar.template(
-            template_data,
-            preserve_trailing_newlines=True,
-            escape_backslashes=False,
-            convert_data=False
-        )
+        resultant = self._check_templar(data=template_data)
 
         # Access to protected method is unavoidable in Ansible
         self._templar.set_available_variables(
@@ -888,12 +894,7 @@ class ActionModule(ActionBase):
             if 'content' in slurpee:
                 dest_data = base64.b64decode(
                     slurpee['content']).decode('utf-8')
-                resultant_dest = self._templar.template(
-                    dest_data,
-                    preserve_trailing_newlines=True,
-                    escape_backslashes=False,
-                    convert_data=False
-                )
+                resultant_dest = self._check_templar(data=dest_data)
                 type_merger = getattr(self,
                                       CONFIG_TYPES.get(_vars['config_type']))
                 _, config_new = type_merger(
@@ -936,12 +937,7 @@ class ActionModule(ActionBase):
 
         # Re-template the resultant object as it may have new data within it
         #  as provided by an override variable.
-        resultant = self._templar.template(
-            resultant,
-            preserve_trailing_newlines=True,
-            escape_backslashes=False,
-            convert_data=False
-        )
+        resultant = self._check_templar(data=resultant)
 
         # run the copy module
         new_module_args = self._task.args.copy()
@@ -983,6 +979,9 @@ class ActionModule(ActionBase):
         # Content from config_template is converted to src
         new_module_args.pop('content', None)
 
+        # remove render enablement option
+        new_module_args.pop('render_template', None)
+
         # Run the copy module
         rc = self._execute_module(
             module_name='copy',
diff --git a/library/config_template b/library/config_template
index bc1f3b7..b085fcb 100644
--- a/library/config_template
+++ b/library/config_template
@@ -75,7 +75,15 @@ options:
       - True
       - False
     default: false
-
+  render_template:
+    description:
+      - Enable or disable the template render engine. This is useful when
+        dealing with remote data that may have jinja content in the comment
+        sections but is not in need of rendering.
+    choices:
+      - True
+      - False
+    default: true
 author: Kevin Carter
 """