download: hardcode artifacts mode & owner (#13570)

The artifacts acquisition does not need particular owner or mode, it
only needs to be readable by other parts of kubespray actually installing
the artefacts where needed.

Thus, remove all mode / owner specific maniulation in download and
hardcode to 0644/0755 for file/directory.

roles/download/tasks/download_file.yml

@@ -22,7 +22,6 @@
   - name: Download_file | Create dest directory on node
     file:
       path: "{{ download.dest | dirname }}"
-      owner: "{{ download.owner | default(omit) }}"
       mode: "0755"
       state: directory
 
@@ -59,8 +58,7 @@
     get_url:
       url: "{{ download.url }}"
       dest: "{{ file_path_cached if download_force_cache else download.dest }}"
-      owner: "{{ omit if download_localhost else (download.owner | default(omit)) }}"
-      mode: "{{ omit if download_localhost else (download.mode | default(omit)) }}"
+      mode: "0644"
       checksum: "{{ download.checksum }}"
       validate_certs: "{{ download_validate_certs }}"
       url_username: "{{ download.username | default(omit) }}"
@@ -96,6 +94,8 @@
       dest: "{{ download.dest }}"
       use_ssh_args: true
       mode: push
+      owner: false
+      group: false
     register: get_task
     until: get_task is succeeded
     delay: "{{ retry_stagger | random + 3 }}"
@@ -103,13 +103,5 @@
     when:
     - download_force_cache
 
-  - name: Download_file | Set mode and owner
-    file:
-      path: "{{ download.dest }}"
-      mode: "{{ download.mode | default(omit) }}"
-      owner: "{{ download.owner | default(omit) }}"
-    when:
-    - download_force_cache
-
   - name: "Download_file | Extract file archives"
     include_tasks: "extract_file.yml"

roles/download/tasks/extract_file.yml

@@ -3,8 +3,8 @@
   unarchive:
     src: "{{ download.dest }}"
     dest: "{{ download.dest | dirname }}"
-    owner: "{{ download.owner | default(omit) }}"
-    mode: "{{ download.mode | default(omit) }}"
+    mode: "a-x,u=rwX,go=rX"
+    # directory: 0755, file: 0644
     remote_src: true
     extra_opts: "{{ download.unarchive_extra_opts | default(omit) }}"
   when:

roles/download/tasks/prep_download.yml

@@ -70,7 +70,6 @@
     path: "{{ local_release_dir }}/images"
     state: directory
     mode: "0755"
-    owner: "{{ ansible_ssh_user | default(ansible_user_id) }}"
   when:
     - ansible_os_family != "Flatcar"