
Newer ansible (2.7) is far more picky about always blocks being a part of block blocks. This means you cannot have a set of when conditions apply to a standalone always block. Fix our use of this by putting our always block in the run puppet block then move the always tasks into a block of their own with a condition set. Change-Id: I50988b6b312e4d00b73ca4454e0420913d4ae181