Add dummy_secrets.yaml to hiera

hiera.yaml

@@ -31,3 +31,6 @@ hierarchy:
 
   - name: "Kubernetes os"
     path: "kubernetes/os/%{::osfamily}.yaml"
+
+  - name: "Dummy secrets"
+    path: "dummy_secrets.yaml"

modules/ocf/manifests/rootpw.pp

@@ -6,8 +6,10 @@
 #
 # To regenerate the root password, see /opt/share/utils/staff/puppet/gen-rootpw
 class ocf::rootpw($stage = 'first') {
-  user { 'root':
-    groups   => ['root'],
-    password => Sensitive(file('/opt/puppet/shares/private/rootpw')),
+  if $::use_private_share {
+    user { 'root':
+      groups   => ['root'],
+      password => Sensitive(file('/opt/puppet/shares/private/rootpw')),
+    }
   }
 }

modules/ocf/manifests/ssl/setup.pp

@@ -37,15 +37,18 @@
       ensure => directory,
       owner  => ocfletsencrypt;
 
-    '/etc/ssl/lets-encrypt/le-account.key':
-      content   => file('/opt/puppet/shares/private/lets-encrypt-account.key'),
-      owner     => ocfletsencrypt,
-      show_diff => false,
-      mode      => '0400';
-
     '/var/lib/lets-encrypt':
       ensure => directory,
       owner  => ocfletsencrypt,
       group  => ssl-cert;
   }
+
+  if $::use_private_share {
+    file { '/etc/ssl/lets-encrypt/le-account.key':
+      content   => file('/opt/puppet/shares/private/lets-encrypt-account.key'),
+      owner     => ocfletsencrypt,
+      show_diff => false,
+      mode      => '0400';
+    }
+  }
 }