Merge "Set check_mode variable every time" into stable/mitaka

releasenotes/notes/fix-check-mode-with-tags-bf798856a27c53eb.yaml

@@ -0,0 +1,7 @@
+---
+fixes:
+  - |
+    When the security role was run in Ansible's check mode and a tag was
+    provided, the ``check_mode`` variable was not being set. Any tasks which
+    depend on that variable would fail. This `bug is fixed <https://bugs.launchpad.net/openstack-ansible/+bug/1590086>`_
+    and the ``check_mode`` variable is now set properly on every playbook run.

tasks/main.yml

@@ -16,10 +16,14 @@
   - name: Verify if we're using check mode
     command: /bin/true
     register: noop_result
+    tags:
+      - always
 
-  - name: Set a fact if we're in check mode
+  - name: Set facts
     set_fact:
-      check_mode: "{{ noop_result|skipped }}"
+      check_mode: "{{ noop_result | skipped }}"
+    tags:
+      - always
 
   - include: apt.yml
   - include: auditd.yml