Use 'become' to open port 22 in firewall
- name: open firewall port 22 for SSH connections
firewalld: port="22/tcp"
zone=public permanent=true state=enabled immediate=yes
- become_user: root
+ become: yes
...
