Move migration from IWD to WPA-supplicant to role

To ensure that migration only runs when EAP-TLS certificate is installed correctly

lmn-client.yml

@@ -382,31 +382,6 @@
         - /etc/systemd/network/wlan-dhcp.network
         - /etc/NetworkManager/system-connections/FVS-devices.nmconnection
 
-    - name: Enable wpa-supplicant
-      ansible.builtin.systemd:
-        name: wpa_supplicant.service
-        enabled: true
-      tags:
-        - never
-        - wlan_8021x
-
-    - name: Disable iwd
-      ansible.builtin.systemd:
-        name: iwd.service
-        enabled: false
-      tags:
-        - never
-        - wlan_8021x
-
-    - name: Remove deprecated NetworkManager config
-      ansible.builtin.blockinfile:
-        path: /etc/NetworkManager/NetworkManager.conf
-        state: absent
-      tags:
-        - never
-        - wlan_8021x
-
-
 - name: Apply roles that must run serial
   hosts: all
   remote_user: ansible

roles/lmn_wlan/tasks/eap-tls_issue-certificate.yaml

@@ -94,3 +94,19 @@
     802-1x.private-key /etc/ssl/private/{{ wlan_ssid }}.key
     802-1x.private-key-password dummy
   changed_when: false
+
+# Temporary fix used to migrate from IWD to WPA-Supplicant - Will be removed later
+- name: Enable wpa-supplicant
+  ansible.builtin.systemd:
+    name: wpa_supplicant.service
+    enabled: true
+
+- name: Disable iwd
+  ansible.builtin.systemd:
+    name: iwd.service
+    enabled: false
+
+- name: Remove deprecated NetworkManager config
+  ansible.builtin.blockinfile:
+    path: /etc/NetworkManager/NetworkManager.conf
+    state: absent