diff --git a/roles/common/molecule/default/prepare.yml b/roles/common/molecule/default/prepare.yml
index 89d70e19002bf8f9524d57712ff0258eee9ad6ed..4563b65b26a9b63dbc131e22148e8a709809a912 100644
--- a/roles/common/molecule/default/prepare.yml
+++ b/roles/common/molecule/default/prepare.yml
@@ -112,7 +112,9 @@
         - ip6table_security
         - ip6table_raw
 
-    - name: Create some custom legacy iptables chains for testing their removal (max chain name length is 29)
+    - name: Create some custom legacy iptables chains for testing their removal (max chain name length is 29)  # noqa no-changed-when
+      # [no-changed-when] Commands should not change things if nothing needs doing
+      #   Does not matter in test prepare stage.
       command: "iptables-legacy -t '{{ item }}' -N '{{ (ansible_date_time.iso8601_micro | to_uuid)[:28] }}'"
       with_items:
         - filter
@@ -121,7 +123,9 @@
         - security
         - raw
 
-    - name: Create some custom legacy ip6tables chains for testing their removal (max chain name length is 29)
+    - name: Create some custom legacy ip6tables chains for testing their removal (max chain name length is 29)  # noqa no-changed-when
+      # [no-changed-when] Commands should not change things if nothing needs doing
+      #   Does not matter in test prepare stage.
       command: "ip6tables-legacy -t '{{ item }}' -N '{{ (ansible_date_time.iso8601_micro | to_uuid)[:28] }}'"
       with_items:
         - filter