add runcmd to clean up chrony sources for ncsa security

See SVCPLAN-5512

terraform/modules/rke1/templates/user_data.tmpl

@@ -141,6 +141,13 @@ write_files:
 # run this command once the system is booted
 runcmd:
 - /usr/local/bin/rke1
+%{ if ncsa_security }
+%{ if username == "ubuntu" }
+# clean up default pool sources if we are using ncsa security
+- /usr/bin/sed -i 's/^pool/# pool/' /etc/chrony/chrony.conf
+- /usr/bin/systemctl restart chronyd
+%{ endif }
+%{ endif }
 
 power_state:
  delay: "+5"