Inventory example:

cacert_ca_name: "myCA"
cacert_ca_trust_anchors_update: True

cacert_ca_copy_to:
  hosts:
    - { host: "server-1", path: "/opt/certs" }
    - { host: "server-2", path: "/opt/certs" }
  groups:
    - { group: "cacert_clients", path: "/opt/certs" }
    - { group: "mygroupname1", path: "/opt/certs" }

cacert_cn_certs:
  - name: mycertname.example.com
    hosts:
      - { host: "server-1", path: "/opt/certs" }
      - { host: "server-2", path: "/opt/certs" }
      - { host: "server-1", path: "/opt/certs", concat: "pem" }
      - { host: "server-2", path: "/opt/certs", concat: "pem" }
    groups:
      - { group: "cacert_clients", path: "/opt/certs" }
      - { group: "mygroupname1", path: "/opt/certs" }

cacert_group_certs:
  - name: mygroupcert.example.com
    append_groups:
      - consul
      - patroni
    hosts:
      - { host: "server-1", path: "/opt/certs" }
      - { host: "server-2", path: "/opt/certs" }
      - { host: "server-1", path: "/opt/certs", concat: "pem" }
      - { host: "server-2", path: "/opt/certs", concat: "pem" }
    groups:
      - { group: "cacert_clients", path: "/opt/certs" }
      - { group: "mygroupname1", path: "/opt/certs" }

cacert_per_host_certs:
  groups:
    - { group: "mygroupname1", path: "/opt/koji/certs", concat: "pem" }