Moving cron-apt into conditional block for non-prod

common/playbooks/k8s.yaml

@@ -25,7 +25,6 @@
       package:
         name:
           - atop
-          - cron-apt
           - fail2ban
           - git
           - mc
@@ -36,19 +35,18 @@
         name:
           - unattended-upgrades
         state: absent
-    - name: Site cron-apt config
-      copy:
-        dest: /etc/cron-apt/config
-        content: |
-          MAILTO=valtri@civ.zcu.cz
-          MAILON=upgrade
-          RUNSLEEP=600
-        mode: 0644
-    - name: Site cron-apt action
-      copy:
-        dest: /etc/cron-apt/action.d/9-upgrade
-        content: -q -q dist-upgrade
-        mode: 0644
+    - name: Site install cron-apt on non-production environments
+      when: site_name not in ["psnc-production1", "safespring-production2"]
+      block:
+        - name: Site install cron-apt package
+          package:
+            name:
+              - cron-apt
+        - name: Site cron-apt action
+          copy:
+            dest: /etc/cron-apt/action.d/9-upgrade
+            content: -q -q dist-upgrade
+            mode: 0644
     - name: Mails settings
       vars:
         fip_hostname: "{{ lookup('dig', (groups['fip'][0], 'PTR') | join('/')) | regex_replace('\\.$', '') }}"