Ah the reason why they aren't run is because we added the `edxapp_installed` fact recently that is set at the end of `deploy.yml` which is not getting set in your case.
I guess this is ok though I think if we just did something like
```

-  template: >
    src={{ item }}.env.json.j2
    dest=/var/tmp/{{ item }}.env.json
  sudo_user: "{{ edxapp_user }}"
  with_items: service_variants_enabled

-   template: >
    src={{ item }}.auth.json.j2
    dest=/var/tmp}/{{ item }}.auth.json
  with_items: service_variants_enabled

```
In the play would overall be less lines of json since you won't need to worry as much about tags and overrides. Also a little worried that we lose track of this config tag and what it is used for in the role.