You are correct. And there is an Ansible role for automated management: https://github.com/linux-system-roles/podman/