---
- name: DevAccess | Render token Secret manifest
  ansible.builtin.template:
    src: dev-token-secret.yml.j2
    dest: /tmp/dev-token-secret.yml
    mode: "0600"

- name: DevAccess | Apply token Secret
  ansible.builtin.command:
    cmd: kubectl apply -f /tmp/dev-token-secret.yml
  environment:
    KUBECONFIG: "{{ dev_access_kubeconfig }}"
    PATH: "/usr/local/bin:/usr/bin:/bin"
  register: _dev_secret
  changed_when: "'created' in _dev_secret.stdout or 'configured' in _dev_secret.stdout"

- name: DevAccess | Wait for token to be populated
  ansible.builtin.command: >
    kubectl get secret {{ dev_access_token_secret_name }}
    -n {{ dev_access_namespace }}
    -o jsonpath='{.data.token}'
  environment:
    KUBECONFIG: "{{ dev_access_kubeconfig }}"
    PATH: "/usr/local/bin:/usr/bin:/bin"
  register: _token_raw
  retries: 10
  delay: 3
  until: _token_raw.stdout | length > 0
  changed_when: false

- name: DevAccess | Decode token
  ansible.builtin.set_fact:
    _dev_token: "{{ _token_raw.stdout | b64decode }}"

- name: DevAccess | Save token to file
  ansible.builtin.copy:
    content: "{{ _dev_token }}\n"
    dest: "{{ dev_access_token_file }}"
    owner: "{{ ansible_user }}"
    group: "{{ ansible_user }}"
    mode: "0600"

- name: DevAccess | Show token info
  ansible.builtin.debug:
    msg: |
      ============================================================
      Developer token for namespace: {{ dev_access_namespace }}
      ServiceAccount: {{ dev_access_sa_name }}
      Token saved to: {{ dev_access_token_file }}
      View token: cat {{ dev_access_token_file }}

      Dashboard URL: http://10.203.0.96:10001
      Login: paste token from the file above
      ============================================================