Make a bunch of stuff use sudo

playbooks/roles/common/tasks/create_users.yml

 ---
 - name: Create 'edx' users group
   group: name=edx state=present
+  sudo: True
   tags:
   - users
   - admin_users
@@ -8,6 +9,7 @@
   # This is a temporary measure for initial configuration; after the last 
   # play is run and we've got a good set of users, ubuntu should no longer be used
   user: name=ubuntu append=yes groups="edx"
+  sudo: True
   tags:
   - users
   - admin_users
@@ -16,12 +18,14 @@
   user: name={{ item.user }} append=yes groups={{ "adm,edx,"+",".join(item.groups) }} shell=/bin/bash
   with_items: admin_users
   when: admin_users is defined
+  sudo: True
   tags:
   - users
   - admin_users
 - name: Copying ssh keys for admin users
   authorized_key: user={{ item.user }} key="{{lookup('file', item.path)}}"
   with_items: admin_keys
+  sudo: True
   tags:
   - users
   - admin_users

playbooks/roles/common/tasks/create_venv.yml

@@ -6,14 +6,17 @@
   - venv_base
 - name: pip install virtualenv
   pip: name=virtualenv state=latest
+  sudo: True
   tags:
   - venv_base
 - name: pip install virtualenvwrapper
   pip: name=virtualenvwrapper state=latest
+  sudo: True
   tags:
   - venv_base
 - name: create edx virtualenv directory
   file: path=$venv_dir owner=ubuntu group=adm mode=2775 state=directory
+  sudo: True
   tags:
   - venv_base
 - name: create the edx virtualenv directory initial contents

playbooks/roles/common/tasks/main.yml

@@ -2,11 +2,13 @@
 - include: create_users.yml
 - name: Create application root
   # In the future consider making group edx r/t adm
-  file: path=$app_base_dir state=directory owner=root group=adm mode=2775 
+  file: path=$app_base_dir state=directory owner=root group=adm mode=2775
+  sudo: True
   tags:
   - pre_install
 - name: Create log directory
   file: path=/mnt/logs state=directory mode=2770 group=adm owner=root
+  sudo: True
   tags:
   - pre_install
 - name: Create aliases to the log directory
@@ -19,18 +21,21 @@
   - pre_install
 - name: Update apt cache
   apt: update_cache=yes
+  sudo: True
   tags:
   - pre_install
 
-- include: create_venv.yml
-
 - name: Install role-independent useful system packages
   apt: pkg={{item}} install_recommends=yes state=present
+  sudo: True
   with_items:
   - ack-grep
   - lynx-cur
   - mosh
   - most
   - screen
+  - python-pip
   tags:
-  - pre_install
\ No newline at end of file
+  - pre_install
+
+- include: create_venv.yml
\ No newline at end of file