)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"change_message_id":"863bcbbd028ad12ce8453aa5cb0ee198489d86b7","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"3c783c05_bedefd28","updated":"2022-12-13 17:34:27.000000000","message":"I think that an extra file: task is needed to ensure that the ownership of the private key file is correct before the openssl_privatekey module runs.\n\nOtherwise if you want to regenerate the certificate only (not the key) there is no way to prevent the key also being regenerated when the ownership/mode remains wrong.","commit_id":"fc325f5388430034905efcb5163885e7bd73beda"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"5bb81dee89fc73ac9542bcb1e131b051065c5de4","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"429297ee_2ecda457","in_reply_to":"3c783c05_bedefd28","updated":"2022-12-13 17:48:43.000000000","message":"I\u0027ve dropped part that triggers private key re-generation for now. The thing is that file task will _always_ be changed in some cases, like storing openstack_deploy folder in git system ,since git does not preserve mode of files.","commit_id":"fc325f5388430034905efcb5163885e7bd73beda"},{"author":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"change_message_id":"1857aa6036c0a1d1601a693b6a63e9d170c9f242","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"b95b1a04_ff0450f3","updated":"2022-12-13 17:47:13.000000000","message":"Actually this looks valid for when the file exists and is not yet created:\n\n  file:\n    path: path: \"{{ ca_dir ~ \u0027/private/\u0027 ~ ca.name ~ \u0027.key.pem\u0027 }}\"\n    state: file\n    mode: \u003c..\u003e\n    owner: \u003c..\u003e\n    group: \u003c..\u003e\n    \n `state: If file, even with other options (such as mode), the file will be modified if it exists but will NOT be created if it does not exist`\n","commit_id":"d01fdd2abf579decc56f7ddf245d31eee320888a"}]}