Disable name_prefix validation on teardown and enable check for misconfigured SSH key permissions

* Do not validate name_prefix when running a teardown, the user may have reasons for wanting to purge an arbitrary namespace
* Validate SSH Private  Key File permissions to handle edge case where a user has misconfigured their ssh dir and Ansible will refuse to connect

Signed-off-by: Daniel Chaffelson <chaffelson@gmail.com>

Author: Chaffelson

roles/cloudera_deploy/tasks/init.yml

@@ -184,7 +184,9 @@
 
 # Validate Name Prefix
 - name: Check supplied Namespace (Azure)
-  when: globals.infra_type == 'azure'
+  when:
+    - globals.infra_type == 'azure'
+    - "'teardown' not in {{ ansible_run_tags }}"
   ansible.builtin.assert:
     that:
       - globals.name_prefix | length > 1
@@ -194,7 +196,9 @@
     quiet: yes
 
 - name: Check supplied Namespace
-  when: globals.infra_type != 'azure'
+  when:
+    - globals.infra_type != 'azure'
+    - "'teardown' not in {{ ansible_run_tags }}"
   ansible.builtin.assert:
     that:
       - globals.name_prefix | length > 1
@@ -246,6 +250,23 @@
       ssh:
         public_key_text: "{{ lookup('file', globals.ssh.public_key_file ) | default(omit) }}"
 
+- name: Validate SSH Private Key File has acceptable permissions
+  when: globals.ssh.private_key_file is defined
+  block:
+    - name: Get information for SSH Private Key File
+      ansible.builtin.stat:
+        path: "{{ globals.ssh.private_key_file }}"
+      register: __private_key_file_stat
+
+    - name: Assert that SSH Private Key has valid permissions
+      ansible.builtin.assert:
+        that:
+          - __private_key_file_stat.stat.mode == '0400' or __private_key_file_stat.stat.mode == '0600'
+        fail_msg:
+          - "SSH Private Key at {{ __private_key_file_stat.stat.path }} has invalid permissions"
+          - "Permissions are {{ __private_key_file_stat.stat.mode }}"
+          - "Permissions should be 0400 or 0600"
+
 # Read in Dynamic Inventory
 - name: Seek Inventory Template in Definition Path
   register: __di_template_stat