From 4df0d9e28fac559e876be2356f4baff29b03978a Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Tue, 4 Apr 2023 13:02:46 -0700
Subject: [PATCH] ipa/client: hbac check Set this to not be changed since it's
 a check

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/ipa/client/tasks/hbac.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/ipa/client/tasks/hbac.yml b/roles/ipa/client/tasks/hbac.yml
index 2bcff80fec..a903e8f272 100644
--- a/roles/ipa/client/tasks/hbac.yml
+++ b/roles/ipa/client/tasks/hbac.yml
@@ -90,6 +90,7 @@
   fail:
     msg: "`{{ item }}` is not defined"
   ignore_errors: true
+  changed_when: false
   when: lookup('vars', item, default="<undefined-sentinel>") == "<undefined-sentinel>"
   loop:
     - ipa_host_group