- name: Create an encrypted lvm pool using a key file and key size
          include_role:
            name: linux-system-roles.storage
          vars:
            storage_pools:
              - name: foo
                type: lvm
                disks: "{{ unused_disks }}"
                encryption: true
                encryption_key: "{{ storage_test_key_file.path }}"
                encryption_luks_version: luks2
                encryption_key_size: 512
                volumes:
                  - name: test2
                    mount_point: "{{ mount_location }}"
                    size: 4g
 

TASK [Check LUKS key size] *****************************************************************************************************
fatal: [localhost]: FAILED! => {
    "assertion": "_storage_test_luks_dump.stdout is search(__pattern, multiline=True)",
    "changed": false,
    "evaluated_to": false,
    "msg": "Wrong key size for pool foo"
}TASK [Remove the key file] ***************************************************************************************************************
ok: [localhost]PLAY RECAP *******************************************************************************************************************************
localhost                  : ok=108  changed=11   unreachable=0    failed=1    skipped=72   rescued=2    ignored=0     

- name: Check LUKS key size
  assert:
    that: _storage_test_luks_dump.stdout is search(__pattern, multiline=True)
    msg: Wrong key size for pool {{ storage_test_pool.name }}
  vars:
    __pattern: >-
      ^MK bits:\s+{{ storage_test_pool.encryption_key_size }}$
  when:
    - storage_test_pool.state == 'present'
    - storage_test_pool.encryption
    - storage_test_pool.encryption_key_size
 

 - name: Check LUKS key size for luks1
  assert:
    that: _storage_test_luks_dump.stdout is search(__pattern, multiline=True)
    msg: Wrong key size for pool {{ storage_test_pool.name }}
  vars:
    __pattern: >-
      ^MK bits:\s+{{ storage_test_pool.encryption_key_size }}$
  when:
    - storage_test_pool.state == 'present'
    - storage_test_pool.encryption
    - storage_test_pool.encryption_key_size
    - storage_test_pool.encryption_luks_version == 'luks1'

- name: Check LUKS key size for luks2
  assert:
    that: _storage_test_luks_dump.stdout is search(__pattern, multiline=True)
    msg: Wrong key size for pool {{ storage_test_pool.name }}
  vars:
    __pattern: >-
      Key:.*{{ storage_test_pool.encryption_key_size  }}\s+bits$
  when:
    - storage_test_pool.state == 'present'
    - storage_test_pool.encryption
    - storage_test_pool.encryption_key_size
    - storage_test_pool.encryption_luks_version == 'luks2'