fail if ssl is not used ( except on CICD )

roles/ldapservertest/defaults/main.yml

@@ -5,7 +5,7 @@ temp_dir: /tmp/test-openldap-server
 ldap_http_port: 389
 ldap_https_port: 636
 clean_all: true
-ssl: false
+ssl: true
 ssl_ca_cert: ''
 ssl_cert: ''
 ssl_private_key: ''

roles/ldapservertest/tasks/main.yml

 ---
 # tasks file for ansible-role-test-openldap-server
+ - name: Fail if ssl is false and the hostname does not contain CICD
+   fail:
+    msg: Always enable ssl when not on the CICD pipeline. OR use the ldapserver role in the first place! 
+   when: "'CICD' not in inventory_hostname and not ssl"
 
  - name: Create {{temp_dir}}
    file: