remove sudos

playbooks/roles/common/tasks/create_users.yml

 ---
 - name: Create 'edx' users group
   group: name=edx state=present
-  sudo: True
   tags:
   - users
   - admin_users
@@ -11,7 +10,6 @@
   # This is a temporary measure for initial configuration; after the last 
   # play is run and we've got a good set of users, ubuntu should no longer be used
   user: name=ubuntu append=yes groups="edx"
-  sudo: True
   tags:
   - users
   - admin_users
@@ -31,7 +29,6 @@
 - name: Copying ssh keys for admin users
   authorized_key: user={{ item.user }} key="{{lookup('file', item.path)}}"
   with_items: admin_keys
-  sudo: True
   tags:
   - users
   - admin_users
@@ -55,7 +52,6 @@
 
 - name: Group adm passwordless sudo
   copy: content="%adm ALL=(ALL) NOPASSWD:ALL" dest=/etc/sudoers.d/adm-group owner=root group=root mode=0440
-  sudo: True
   tags:
   - users
   - admin_users

playbooks/roles/common/tasks/create_venv.yml

@@ -5,28 +5,21 @@
   tags:
   - venv_base
   - install
-
 - name: pip install virtualenv
   pip: name=virtualenv state=latest
-  sudo: True
   tags:
   - venv_base
   - install
-
 - name: pip install virtualenvwrapper
   pip: name=virtualenvwrapper state=latest
-  sudo: True
   tags:
   - venv_base
   - install
-
 - name: create edx virtualenv directory
   file: path=$venv_dir owner=ubuntu group=adm mode=2775 state=directory
-  sudo: True
   tags:
   - venv_base
   - install
-
 - name: create the edx virtualenv directory initial contents
   command: /usr/local/bin/virtualenv $venv_dir creates=$venv_dir/bin/activate
   tags:

playbooks/roles/common/tasks/edx_logging_base.yml

@@ -13,13 +13,13 @@
   - update
 
 - name: Touch tracking file into existence
-  command: touch -a {{log_base_dir}}/tracking.log creates={{log_base_dir}}/tracking.log 
+  command: touch -a {{log_base_dir}}/tracking.log creates={{log_base_dir}}/tracking.log
   tags:
   - logging
   - update
 
 - name: Set permissions on tracking file
-  file: path={{log_base_dir}}/tracking.log owner=syslog group=adm mode=640
+  file: path={{log_base_dir}}/tracking.log owner=syslog group=adm mode=750
   tags:
   - logging
   - update

playbooks/roles/common/tasks/software_update.yml

 ---
 - name: edx-update.sh, manual lms/cms update script
   copy: src=roles/common/files/edx-update.sh dest=/usr/local/bin/edx-update.sh owner=ubuntu group=adm mode=0775
-  sudo: True
   tags:
-  - release
   - update
+  - release