Variables names from within roles should use keycloak_realm_ as a prefix. (vars: keycloak_admin_password)

Variables names from within roles should use keycloak_realm_ as a prefix. (vars: keycloak_clients)

Variables names from within roles should use keycloak_realm_ as a prefix. (vars: keycloak_realm)

Variables names from within roles should use keycloak_realm_ as a prefix. (vars: keycloak_user_federation)

Variables names from within roles should use keycloak_realm_ as a prefix. (vars: keycloak_realm)

Use failed_when and specify error conditions instead of using ignore_errors.

Jinja2 spacing could be improved: {{ rhn_products.results | map(attribute='file_path') | select('match', '^[^/]*/rh-sso-.*[0-9]*[.][0-9]*[.][0-9]*.*$') | map('regex_replace','[^/]*/rh-sso-([0-9]*[.][0-9]*[.][0-9]*)-.*','\1' ) | list | unique }} -> {{ rhn_products.results | map(attribute='file_path') | select('match', '^[^/]*/rh-sso-.*[0-9]*[.][0-9]*[.][0-9]*.*$') | map('regex_replace', '[^/]*/rh-sso-([0-9]*[.][0-9]*[.][0-9]*)-.*', '\1') | list | unique }}

Tasks that run when changed should likely be handlers.

Variables names from within roles should use keycloak_ as a prefix. (vars: keycloak)