add func for idempotent clone
add roles to node instead of using -o