---
- name: Cosmos Kiosk Pipeline
  hosts: all
  become: yes

  roles:
    - role: cosmos_init
      when: not refresh_special | bool

    - role: cosmos_init
      when: refresh_only | bool
      vars:
        security_check_only: true 

    - role: docker_workstation
      when: install_docker | bool and not refresh_special | bool

    - role: chrome_kiosk

...