---
- name: Installing and configuring PostgreSQL
  hosts: rhel9.example.com
  tasks:
    - name: Create
      ansible.builtin.file:
        path: /etc/postgresql/
        state: directory
        mode: 755
    - name: Copy CA certificate
      ansible.builtin.copy:
        src: "~/{{ inventory_hostname }}.crt"
        dest: "/etc/postgresql/server.crt"
        owner: postgres
    - name: Copy private key
      ansible.builtin.copy:
        src: "~/{{ inventory_hostname }}.key"
        dest: "/etc/postgresql/server.key"
        mode: 0600
        owner: postgres
    - name: PostgreSQL with an existing private key and certificate
      ansible.builtin.include_role:
        name: rhel-system-roles.postgresql
      vars:
        postgresql_version: "16"
        postgresql_ssl_enable: true
        postgresql_cert_name: "/etc/postgresql/server"

$ ansible-playbook --verbose ~/playbook.yml

TASK [rhel-system-roles.postgresql : Install certificate file] ****************************************************************************************************************************************************
fatal: [rhel9.example.com]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: '__pg_server_crt' is undefined. '__pg_server_crt' is undefined\n\nThe error appears to be in '/usr/share/ansible/roles/rhel-system-roles.postgresql/tasks/certificate.yml': line 56, column 7, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n  block:\n    - name: Install certificate file\n      ^ here\n"}

- name: Install user provided TLS certificates for postgresql
  when:
    - __postgresql_cert.stat.exists
    - __postgresql_key.stat.exists
    - postgresql_certificates | length < 1
  vars:
    __pg_server_crt: "{{ __postgresql_data_dir }}/server.crt"
    __pg_server_key: "{{ __postgresql_data_dir }}/server.key"
  ...