- name: select key type
  set_fact:
    kt: "{{ ca_key_types | selectattr('name', 'equalto', item.type) | list | first }}"


- name: fail if key type is empty
  fail:
    msg: "key type must be one of: {{ ca_key_names | join(', ') }}"
  when: (kt | length) == 0


- name: set preferred mode, owner and group
  set_fact:
    k_mode: "{{ (ca_options | d({}) | combine(item)).mode | d(omit) }}"
    k_owner: "{{ (ca_options | d({}) | combine(item)).owner | d(omit) }}"
    k_group: "{{ (ca_options | d({}) | combine(item)).group | d(omit) }}"
    k_none: yes