Cleaning up inventory

hosts.yml

@@ -1,25 +1,25 @@
 ---
-# file: hosts.yml
+    # file: hosts.yml
-
+    
-prod:
+    prod:
-  hosts:
+      hosts:
-    ws01:
+        ws01:
-      ansible_host: 10.10.10.14
+          ansible_host: 10.10.10.14
-      base_core_hostname: "hltk-ws1"
+          base_core_hostname: "hltk-ws1"
-    ws02:
+        ws02:
-      ansible_host: 10.10.10.18
+          ansible_host: 10.10.10.18
-      base_core_hostname: "hltk-ws2"
+          base_core_hostname: "hltk-ws2"
-    ws03:
+        ws03:
-      ansible_host: 10.10.10.20
+          ansible_host: 10.10.10.20
-      base_core_hostname: "hltk-ws3"
+          base_core_hostname: "hltk-ws3"
-    ws04:
+        ws04:
-      ansible_host: 10.10.10.19
+          ansible_host: 10.10.10.19
-      base_core_hostname: "hltk-ws4"
+          base_core_hostname: "hltk-ws4"
-
+    
-  vars:
+      vars:
-    ansible_user: haletek
+        ansible_user: haletek
-    #ansible_ssh_common_args: '-o ProxyCommand="ssh dc1-bastion -W %h:%p 2>/dev/null" -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no' # Disable host key checking for re-imaging w/ jump box
+        ansible_ssh_common_args: '-o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no' # Disable host key checking for re-imaging
-    ansible_ssh_common_args: '-o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no' # Disable host key checking for re-imaging
+        base_core_ssh_permit_password_authentication: true # Enable
-    base_core_ssh_permit_password_authentication: true # Enable
+        base_core_root_ca_url: "https://cert.haletek.cloud/PKI/RootCA.cer" # Define the Root CA to be installed
-    base_core_root_ca_url: "http://cert.haletek.cloud/PKI/RootCA.cer" # Define the Root CA to be installed
+        base_core_root_ca_basename: "HLTKCL_RootCA" # Define the name of the Root CA to be installed
-    base_core_root_ca_basename: "HLTKCL_RootCA" # Define the name of the Root CA to be installed
+    

roles/base/tasks/core_cert.yml

@@ -15,7 +15,7 @@
     state: latest
     extra_args: --upgrade
   when: ansible_python_version is version('3', '>=')
-  become: true
+  become: false
 
 - name: Install latest python2-cryptography
   package:
@@ -30,7 +30,7 @@
     executable: pip3
     state: latest
   when: ansible_python_version is version('3', '>=')
-  become: true
+  become: false
 
 - name: Ensure directory exists for local self-signed TLS certs
   file: