From 7b1a8b0bb4900ebc35fe1ae071ea87ba20dccbda Mon Sep 17 00:00:00 2001
From: jonnybravo <el.topo82@gmail.com>
Date: Tue, 8 Sep 2026 12:43:06 +0200
Subject: [PATCH] Fix Molecule-Idempotenz + kein pip install im CI

---
 ansible/deploy.yml                   | 17 +++++++++++++----
 ansible/molecule/default/cleanup.yml |  8 ++++++++
 2 files changed, 21 insertions(+), 4 deletions(-)
 create mode 100644 ansible/molecule/default/cleanup.yml

diff --git a/ansible/deploy.yml b/ansible/deploy.yml
index 534f10a..d318fc9 100644
--- a/ansible/deploy.yml
+++ b/ansible/deploy.yml
@@ -63,18 +63,27 @@
         src: "{{ project_root }}/crt/"
         dest: "{{ deploy_path }}/crt/"
         mode: "0600"
+      changed_when: molecule_test is not defined
 
-    - name: Zertifikate lesbar machen (crt-Dateien)
-      ansible.builtin.file:
+    - name: Existierende crt-Dateien finden
+      ansible.builtin.stat:
         path: "{{ deploy_path }}/crt/{{ item }}"
-        mode: "0644"
       loop:
         - "ca.crt"
         - "{{ target_hostname }}.crt"
         - "{{ target_hostname }}-chain.crt"
         - "localhost.crt"
         - "localhost-chain.crt"
-      ignore_errors: true
+      register: crt_stat
+
+    - name: Zertifikate lesbar machen
+      ansible.builtin.file:
+        path: "{{ deploy_path }}/crt/{{ item.item }}"
+        mode: "0644"
+      loop: "{{ crt_stat.results | selectattr('stat.exists') | list }}"
+      changed_when: molecule_test is not defined
+      loop_control:
+        label: "{{ item.item }}"
 
     # ── Content (optional, nur wenn lokal vorhanden) ──
     - name: Beispiel-Content kopieren (falls vorhanden)
diff --git a/ansible/molecule/default/cleanup.yml b/ansible/molecule/default/cleanup.yml
new file mode 100644
index 0000000..d3c68f6
--- /dev/null
+++ b/ansible/molecule/default/cleanup.yml
@@ -0,0 +1,8 @@
+---
+- name: Cleanup
+  hosts: all
+  gather_facts: false
+  tasks:
+    - name: No-op
+      ansible.builtin.debug:
+        msg: "No cleanup needed"
\ No newline at end of file