Bug 1861318

Description of problem:
Following playbook works. After uncommenting logging_pki* variables it stops to work. According to https://github.com/linux-system-roles/logging#security-options the rest have reasonable default so I think it should work.

Ansible says:
TASK [/usr/share/ansible/roles/rhel-system-roles.logging/roles/rsyslog : Generate global rule to add to __rsyslog_common_rules] **************************************************************************************************************
task path: /usr/share/ansible/roles/rhel-system-roles.logging/roles/rsyslog/tasks/main.yml:99
File lookup using /usr/share/ansible/roles/rhel-system-roles.logging/roles/rsyslog/templates/global.j2 as file
fatal: [server]: FAILED! => {
    "msg": "The task includes an option with an undefined variable. The error was: 'dict object' has no attribute 'type'\n\nThe error appears to be in '/usr/share/ansible/roles/rhel-system-roles.logging/roles/rsyslog/tasks/main.yml': line
 99, column 7, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n    - name: Generate global rule to add to __rsyslog_common_rules\n      ^ here\n"
}


# cat > inventory.ini <<EOF
[servers]
server ansible_host=$syncSERVER_HOSTNAME
[clients]
client ansible_host=$syncCLIENT_HOSTNAME
EOF
# cat > playbook.yaml << EOF
- name: server tcp
  hosts: servers
  roles:
    - linux-system-roles.logging
  vars:
    #logging_pki: tls
    #logging_pki_authmode: x509/name
    #logging_pki_files:
    #    - ca_cert_src: $PWD/ca.pem
    #      cert_src: $PWD/server-cert.pem
    #      private_key_src: $PWD/server-key.pem
    logging_permitted_peers:
        - $syncCLIENT_HOSTNAME
    logging_inputs:
      - name: system_input
        type: basics
      - name: remote_input
        type: remote
        tcp_port: 514
    logging_outputs:
      - name: files_output
        type: files
    logging_flows:
      - name: flows
        inputs: [system_input, remote_input]
        outputs: [files_output]
- name: client tcp
  hosts: clients
  roles:
    - linux-system-roles.logging
  vars:
    #logging_pki: tls
    #logging_pki_authmode: x509/name
    #logging_pki_files:
    #    - ca_cert_src: $PWD/ca.pem
    #      cert_src: $PWD/client-cert.pem
    #      private_key_src: $PWD/client-key.pem
    logging_permitted_peers:
        - $syncSERVER_HOSTNAME
    logging_inputs:
        - name: system_input
          type: basics
    logging_outputs:
        - name: files_output
          type: files
        - name: forward_output
          type: forwards
          facility: local2
          protocol: tcp
          target: $syncSERVER_IP
          port: 514
    logging_flows:
        - name: flows
          inputs: [system_input]
          outputs: [files_output, forward_output]
EOF

Version-Release number of selected component (if applicable):
rhel-system-roles-1.0-14.el8.noarch

How reproducible:
100%