[lots of] deprecation warnings in Ansible 2.8

[sfuerte]

Describe the bug

DEPRECATION WARNING]: evaluating os_hardening_enabled as a bare variable, this behaviour will go away and you might need to add |bool to the expression in the future. Also see CONDITIONAL_BARE_VARS
configuration toggle.. This feature will be removed in version 2.12. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.

[DEPRECATION WARNING]: Use errors="ignore" instead of skip. This feature will be removed in version 2.12. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.

[DEPRECATION WARNING]: evaluating os_hardening_enabled as a bare variable, this behaviour will go away and you might need to add |bool to the expression in the future. Also see CONDITIONAL_BARE_VARS
configuration toggle.. This feature will be removed in version 2.12. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.

[DEPRECATION WARNING]: evaluating os_security_kernel_enable_core_dump as a bare variable, this behaviour will go away and you might need to add |bool to the expression in the future. Also see
CONDITIONAL_BARE_VARS configuration toggle.. This feature will be removed in version 2.12. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.

Expected behavior
Clean run with no warnings

Example Playbook

...
  roles:
    - role: dev-sec.os-hardening
...

OS / Environment
Ansible Version

# ansible --version
ansible 2.8.0
  config file = /etc/ansible/ansible.cfg
  configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python2.7/site-packages/ansible
  executable location = /usr/bin/ansible
  python version = 2.7.5 (default, Mar 26 2019, 22:13:06) [GCC 4.8.5 20150623 (Red Hat 4.8.5-36)]

Role Version

# ansible-galaxy list  | grep os-hard
- dev-sec.os-hardening, 5.2.0

[rndmh3ro]

Thanks @sfuerte for opening this issue.

As this seems easy to fix, I added the help-wanted label so anyone who wants to can create a PR!

[Normo]

@rndmh3ro,
#224 fixes allmost all deprecation warnings except for:
[DEPRECATION WARNING]: Use errors="ignore" instead of skip. This feature will be removed in version 2.12. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.

• ansible 2.8: "skip: true" vs "errors=ignore" ansible/ansible#56713
• lookup(first_found) with errors=ignore returns empty string ansible/ansible#56775

[rndmh3ro]

It seems the last deprecation warning won't go away until Ansible 2.9 so lets wait for it and keep the ticket open.

[rndmh3ro]

Ansible 2.9 is released and I see no more deprecation warnings.