---
- block:

  - name: Local action | Create local temporary directory for certificates generation
    local_action:
      module: file
      path: /tmp/opendistro-nodecerts
      state: directory
    run_once: true
    
  - name: Local action | Download certificates generation tool
    local_action:
      module: get_url
      url: https://releases.floragunn.com/search-guard-tlstool/1.7/search-guard-tlstool-1.7.zip
      dest: /tmp/opendistro-nodecerts/search-guard-tlstool-1.7.zip
    run_once: /tmp/opendistro-nodecerts/search-guard-tlstool.zip

  - name: Local action | Extract the certificates generation tool
    local_action:
      module: unarchive
      src: /tmp/opendistro-nodecerts/search-guard-tlstool-1.7.zip
      dest: /tmp/opendistro-nodecerts/

  - name: Local action | Add the execution bit to the binary
    local_action:
      module: file
      dest: /tmp/opendistro-nodecerts/tools/sgtlstool.sh
      mode: a+x
    run_once: true

  - name: Local action | Prepare the certificates generation template file
    local_action:
      module: template
      src: "templates/tlsconfig.yml.j2"
      dest: /tmp/opendistro-nodecerts/config/tlsconfig.yml
    run_once: true

  - name: Local action | Check if root CA file exists
    local_action:
      module: stat 
      path: /tmp/opendistro-nodecerts/config/root-ca.key
    register: root_ca_file

  - name: Local action | Generate the node & admin certificates in local
    local_action:
      module: command /tmp/opendistro-nodecerts/tools/sgtlstool.sh -c /tmp/opendistro-nodecerts/config/tlsconfig.yml -ca -crt -t /tmp/opendistro-nodecerts/config/ -f -o
    run_once: true
    when: root_ca_file.stat.exists == False

  tags:
  - generate-certs