Become consistent with become invocations

Author: MoteHue

etc/kayobe/ansible/wazuh-manager.yml

@@ -9,7 +9,6 @@
     - generate-certs
 # Single node
 - hosts: wazuh-manager
-  become: yes
   become_user: root
   roles:
     - role: "{{ playbook_dir }}/roles/wazuh-ansible/wazuh-ansible/roles/wazuh/wazuh-indexer"
@@ -23,7 +22,6 @@
             path: "{{ local_custom_sca_policies_path }}"
           register: custom_sca_policies_folder
           delegate_to: localhost
-          become: no
 
         - name: Gather list of custom SCA policies
           find:
@@ -34,6 +32,7 @@
           when: custom_sca_policies_folder.stat.exists
 
         - name: Copy custom SCA policy files to Wazuh manager
+          become: yes
           copy:
             # Note the trailing slash to copy directory contents
             src: "{{ local_custom_sca_policies_path }}/"
@@ -43,6 +42,7 @@
           when: custom_sca_policies.files | length > 0
 
         - name: Add custom policy definition(s) to the shared Agent config
+          becomd: yes
           blockinfile:
             path: "/var/ossec/etc/shared/default/agent.conf"
             state: present
@@ -65,6 +65,7 @@
         - Restart wazuh
 
     - name: Set http/s_proxy vars in ossec-init.conf for vulnerability detector
+      become: yes
       blockinfile:
         path: "/var/ossec/etc/ossec.conf"
         state: present
@@ -83,9 +84,9 @@
         path: "{{ local_custom_certs_path }}"
       register: custom_certificates_folder
       delegate_to: localhost
-      become: no
 
     - name: Copy the node & admin certificates to Wazuh dashboard
+      become: yes
       copy:
         src: "{{ local_custom_certs_path }}/{{ item }}"
         dest: /etc/wazuh-dashboard/certs/
@@ -100,9 +101,9 @@
         - Restart wazuh-dashboard
 
     - name: Perform health check against filebeat
+      become: yes
       command: filebeat test output
       changed_when: false
-      become: true
       retries: 2
 
   handlers:
@@ -117,15 +118,13 @@
         state: restarted
 
 - hosts: wazuh-agent
-  become: yes
   become_user: root
   tasks:
     - name: Check if custom SCA policies directory exists
       stat:
         path: "{{ local_custom_sca_policies_path }}"
       register: custom_sca_policies_folder
       delegate_to: localhost
-      become: no
 
     - name: Gather list of custom SCA policies
       find:
@@ -136,13 +135,13 @@
       when: custom_sca_policies_folder.stat.exists
 
     - name: Allow Wazuh agents to execute commands in SCA policies sent from the Wazuh manager
+      become: yes
       blockinfile:
         path: "/var/ossec/etc/local_internal_options.conf"
         state: present
         owner: wazuh
         group: wazuh
-        block: |
-          sca.remote_commands=1
+        block: sca.remote_commands=1
       when: custom_sca_policies.files | length > 0
       notify:
         - Restart wazuh-agent