Fatal: -> localhost]: FAILED! => { "changed":

false,
"module_stderr": "sudo: a password is required\n",
"module_stdout": "",
"msg": "MODULE FAILURE\nSee stdout/stderr for the exact error",
"rc": 1
}

при этом 40 тасков до этого требующие sudo отрабатывают
в sudoers всё есть
а вот на этих 2 тасках веселье

- name: Security Plugin configuration | Create local temporary directory for certificates generation
local_action:
module: file
path: /opt/opensearch-nodecerts
state: directory
run_once: true
register: configuration


- name: Security Plugin configuration | Download certificates generation tool
local_action:
module: get_url
url: https://search.maven.org/remotecontent?filepath=com/floragunn/search-guard-tlstool/1.5/search-guard-tlstool-1.5.tar.gz
dest: /opt/opensearch-nodecerts/search-guard-tlstool.tar.gz
run_once: true
when: configuration.changed

local_action на маке запускается?

да