don't bother with admin creation if running

roles/keycloak/tasks/main.yml

@@ -22,11 +22,16 @@
   notify:
     - restart keycloak
 
+- name: get service facts
+  service_facts:
+
 - name: create drop-in directory for keycloak.service
   file: path=/etc/systemd/system/keycloak.service.d state=directory owner=root group=root mode=0755
+  when: ansible_facts.services["keycloak.service"]["state"] != "running"
 
 - name: install drop-in for keycloak.service
   copy: src=create-keycloak-admin.conf dest=/etc/systemd/system/keycloak.service.d/ owner=root group=root mode=0644
+  when: ansible_facts.services["keycloak.service"]["state"] != "running"
 
 - name: create an admin user when first starting keycloak
   block:
@@ -39,6 +44,7 @@
   always:
     - name: remove admin credentials once keycloak is running
       file: path=/etc/keycloak/admin-user.conf state=absent
+  when: ansible_facts.services["keycloak.service"]["state"] != "running"
 
 - name: open firewall hole
   ansible.posix.firewalld: port={{ item }} permanent=true state=enabled immediate=yes