- debug:
    msg: Running tests/options-ca.yml
- name: options-ca
  when: pyopenssl_version.stdout is version('0.15', '>=') or cryptography_version.stdout is version('1.6', '>=')
  block:
  - name: Generate privatekey
    loop:
    - key1
    - key2
    loop_control:
      loop_var: key
    community.crypto.openssl_privatekey:
      path: '{{ output_dir }}/ansible_{{ key }}.key'
      size: 2048
      mode: '0666'
  - name: Generate CSR
    loop:
    - key1
    - key2
    loop_control:
      loop_var: key
    community.crypto.openssl_csr:
      path: '{{ output_dir }}/ansible_{{ key }}.csr'
      privatekey_path: '{{ output_dir }}/ansible_{{ key }}.key'
      basic_constraints:
      - CA:TRUE
      key_usage:
      - keyCertSign
  - name: Generate self-signed certificate
    loop:
    - key1
    - key2
    loop_control:
      loop_var: key
    community.crypto.openssl_certificate:
      path: '{{ output_dir }}/ansible_{{ key }}.pem'
      privatekey_path: '{{ output_dir }}/ansible_{{ key }}.key'
      csr_path: '{{ output_dir }}/ansible_{{ key }}.csr'
      provider: selfsigned
  - name: signing_ca_cert and signing_ca_key (check mode)
    docker_swarm:
      advertise_addr: '{{ansible_default_ipv4.address | default(''127.0.0.1'')}}'
      state: present
      signing_ca_cert: '{{ lookup(''file'', output_dir ~ ''/ansible_key1.pem'') }}'
      signing_ca_key: '{{ lookup(''file'', output_dir ~ ''/ansible_key1.key'') }}'
      timeout: 120
    check_mode: true
    diff: true
    register: output_1
    ignore_errors: true
  - name: signing_ca_cert and signing_ca_key
    docker_swarm:
      advertise_addr: '{{ansible_default_ipv4.address | default(''127.0.0.1'')}}'
      state: present
      signing_ca_cert: '{{ lookup(''file'', output_dir ~ ''/ansible_key1.pem'') }}'
      signing_ca_key: '{{ lookup(''file'', output_dir ~ ''/ansible_key1.key'') }}'
      timeout: 120
    diff: true
    register: output_2
    ignore_errors: true
  - name: Private key
    debug: msg="{{ lookup('file', output_dir ~ '/ansible_key1.key') }}"
  - name: Cert
    debug: msg="{{ lookup('file', output_dir ~ '/ansible_key1.pem') }}"
  - docker_swarm_info: null
    register: output
    ignore_errors: true
  - debug: var=output
  - name: signing_ca_cert and signing_ca_key (change, check mode)
    docker_swarm:
      state: present
      signing_ca_cert: '{{ lookup(''file'', output_dir ~ ''/ansible_key2.pem'') }}'
      signing_ca_key: '{{ lookup(''file'', output_dir ~ ''/ansible_key2.key'') }}'
      timeout: 120
    check_mode: true
    diff: true
    register: output_5
    ignore_errors: true
  - name: signing_ca_cert and signing_ca_key (change)
    docker_swarm:
      state: present
      signing_ca_cert: '{{ lookup(''file'', output_dir ~ ''/ansible_key2.pem'') }}'
      signing_ca_key: '{{ lookup(''file'', output_dir ~ ''/ansible_key2.key'') }}'
      timeout: 120
    diff: true
    register: output_6
    ignore_errors: true
  - name: assert signing_ca_cert and signing_ca_key
    assert:
      that:
      - output_1 is changed
      - 'output_1.actions[0] | regex_search("New Swarm cluster created: ")'
      - output_1.diff.before is defined
      - output_1.diff.after is defined
      - output_2 is changed
      - 'output_2.actions[0] | regex_search("New Swarm cluster created: ")'
      - output_2.diff.before is defined
      - output_2.diff.after is defined
      - output_5 is changed
      - output_5.actions[0] == "Swarm cluster updated"
      - output_5.diff.before is defined
      - output_5.diff.after is defined
      - output_6 is changed
      - output_6.actions[0] == "Swarm cluster updated"
      - output_6.diff.before is defined
      - output_6.diff.after is defined
    when: docker_py_version is version('2.6.0', '>=')
  - assert:
      that:
      - output_1 is failed
      - ('version is ' ~ docker_py_version ~ ' ') in output_1.msg
      - '''Minimum version required is 2.6.0 '' in output_1.msg'
    when: docker_py_version is version('2.6.0', '<')
  - include_tasks: cleanup.yml