Document link:

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/installing_identity_management/installing-an-identity-management-server-using-an-ansible-playbook_installing-identity-management#setting-the-parameters-for-a-deployment-with-an-integrated-dns-and-an-external-ca-as-the-root-ca_server-ansible

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html-single/installing_identity_management/index#setting-the-parameters-for-a-deployment-with-external-dns-and-an-external-ca-as-the-root-ca_server-ansible

Section number and name:

RHEL8:

1. 31.7. Setting the parameters for a deployment with an integrated DNS and an external CA as the root CA
2. Step 11 - Create another playbook for the final step of the installation.

RHEL9:

1. 25.8. Setting the parameters for a deployment with external DNS and an external CA as the root CA
2. Step 9 - Create another playbook for the final step of the installation.

Describe the issue:

In below code "Playbook to configure IPA server Step -1", it should be Step 2 (or Step 3 depending on the logic of code).

---
- name: Playbook to configure IPA server Step -1
  hosts: ipaserver
  become: true
  vars_files:
  - playbook_sensitive_data.yml
  vars:
    ipaserver_external_cert_files: "/root/chain.crt"  pre_tasks:
  - name: Copy "{{ groups.ipaserver[0] + '-chain.crt' }}" to /root/chain.crt on node
    copy:
      src: "{{ groups.ipaserver[0] + '-chain.crt' }}"
      dest: "/root/chain.crt"
      force: yes  roles:
  - role: ipaserver
    state: present 

Suggestions for improvement:

Additional information:

Documentation from upstream project

https://github.com/freeipa/ansible-freeipa/blob/master/roles/ipaserver/README.md