SSL Transport setup with Ansible

How do normal installations of the elasticstack work with SSL Transport/HTTP when using Ansible?
I'm using the github ansible role setup. From the documentation, it shows the cert setup using elasticsearch-certutil to generate the key files. However, this isn't there until the initial install is completed, and if you enable and set the paths, the play fails saying that the key files can't be located.

Hi @biggtimber,

ansible-elasticsearch role require that you generate the certificates before running it.

The certificate need to be passed to es_ssl_certificate variable or es_ssl_keystore/es_ssl_truststore if you use PKCS12 keystore.

Did you do that?

Could you also provide your playbook?

I ran them manually eventually, and ti worked. Thanks.