generate a private key (for now, on remote host)

example.yml

@@ -3,3 +3,5 @@
 - hosts: all
   roles:
     - generate-cert
+  vars:
+    path: /tmp/test-client

roles/generate-cert/defaults/main.yml

@@ -0,0 +1 @@
+---

roles/generate-cert/tasks/main.yml

@@ -2,3 +2,11 @@
 - name: Test
   ansible.builtin.debug:
     msg: "Test"
+
+- name: Generate private key
+  openssl_privatekey:
+    path: "{{ path }}.key"
+    owner: "{{ owner | default(omit) }}"
+    group: "{{ group | default(omit) }}"
+    mode: "{{ key_mode | default(omit) }}"
+    size: "{{ key_size | default(omit) }}"