feat: removed become from role

handlers/main.yml

@@ -3,5 +3,4 @@
 - name: "Update the trust store"
   ansible.builtin.command: update-ca-certificates
   changed_when: false
-  become: true
   listen: "update-ca-certificates"

molecule/default/converge.yml

@@ -1,6 +1,7 @@
 ---
 - name: Converge
   hosts: all
+  become: true
   tasks:
     - name: "Include ednxzu.import_vault_root_ca"
       ansible.builtin.include_role:

molecule/default/verify.yml

@@ -1,23 +1,9 @@
 ---
 - name: Verify
   hosts: all
-  gather_facts: false
+  gather_facts: true
+  become: true
   tasks:
-    - name: "Test: file /etc/hosts"
-      block:
-        - name: "Stat file /etc/hosts"
-          ansible.builtin.stat:
-            path: "/etc/hosts"
-          register: stat_etc_hosts
-
-        - name: "Verify file /etc/hosts"
-          ansible.builtin.assert:
-            that:
-              - stat_etc_hosts.stat.exists
-              - stat_etc_hosts.stat.isreg
-              - stat_etc_hosts.stat.pw_name == 'root'
-              - stat_etc_hosts.stat.gr_name == 'root'
-
     - name: "Test: directory /usr/local/share/ca-certificates"
       block:
         - name: "Stat directory /usr/local/share/ca-certificates"

molecule/default_vagrant/converge.yml

@@ -1,6 +1,7 @@
 ---
 - name: Converge
   hosts: all
+  become: true
   tasks:
     - name: "Include ednxzu.import_vault_root_ca"
       ansible.builtin.include_role:

molecule/default_vagrant/verify.yml

@@ -2,6 +2,7 @@
 - name: Verify
   hosts: all
   gather_facts: true
+  become: true
   tasks:
     - name: "Test: directory /usr/local/share/ca-certificates"
       block:

molecule/with_custom_ca/converge.yml

@@ -1,6 +1,7 @@
 ---
 - name: Converge
   hosts: all
+  become: true
   tasks:
     - name: "Include ednxzu.import_vault_root_ca"
       ansible.builtin.include_role:

molecule/with_custom_ca/verify.yml

@@ -1,23 +1,9 @@
 ---
 - name: Verify
   hosts: all
-  gather_facts: false
+  gather_facts: true
+  become: true
   tasks:
-    - name: "Test: file /etc/hosts"
-      block:
-        - name: "Stat file /etc/hosts"
-          ansible.builtin.stat:
-            path: "/etc/hosts"
-          register: stat_etc_hosts
-
-        - name: "Verify file /etc/hosts"
-          ansible.builtin.assert:
-            that:
-              - stat_etc_hosts.stat.exists
-              - stat_etc_hosts.stat.isreg
-              - stat_etc_hosts.stat.pw_name == 'root'
-              - stat_etc_hosts.stat.gr_name == 'root'
-
     - name: "Test: directory /usr/local/share/ca-certificates"
       block:
         - name: "Stat directory /usr/local/share/ca-certificates"

molecule/with_custom_ca_vagrant/converge.yml

@@ -1,6 +1,7 @@
 ---
 - name: Converge
   hosts: all
+  become: true
   tasks:
     - name: "Include ednxzu.import_vault_root_ca"
       ansible.builtin.include_role:

molecule/with_custom_ca_vagrant/verify.yml

@@ -2,6 +2,7 @@
 - name: Verify
   hosts: all
   gather_facts: true
+  become: true
   tasks:
     - name: "Test: directory /usr/local/share/ca-certificates"
       block:

tasks/import.yml

@@ -23,6 +23,5 @@
     cmd: openssl x509 -inform {{ 'PEM' if item.rc == 0 else 'DER' }} -in {{ item.item.dest }} -out {{ import_vault_root_ca_cert_dir }}/{{ item.item.item.cert_name }}.crt -outform pem
     creates: "{{ import_vault_root_ca_cert_dir }}/{{ item.item.item.cert_name }}.crt"
   loop: "{{ cert_format_results.results }}"
-  become: true
   notify:
     - update-ca-certificates