ocp-security-playbooks/pre-flight.yml

---
- name: Pre-flight checks only.
  hosts: workstation.lab.example.com
  gather_subset: min
  become: no
  roles:
    - role: pull-tools
      tags: tools
    - role: check-env
      tags: check
    - role: fix-operators
      tags: fix
    - role: fix-labs
      tags: labs
...