#  Copyright 2021 Dell Inc. or its subsidiaries. All Rights Reserved.
#
#  Licensed under the Apache License, Version 2.0 (the "License");
#  you may not use this file except in compliance with the License.
#  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
#  Unless required by applicable law or agreed to in writing, software
#  distributed under the License is distributed on an "AS IS" BASIS,
#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#  See the License for the specific language governing permissions and
#  limitations under the License.
---

- name: Include variables from control_plane_common role
  include_vars: "{{ role_path }}/../../../roles/control_plane_common/vars/main.yml"
  no_log: True

- name: Check login_vars.yml is encrypted
  command: cat {{ role_path }}/../../../{{ login_vars_filename }}
  changed_when: false
  register: config_content

- name: Decrpyt login_vars.yml
  command: >-
    ansible-vault decrypt {{ role_path }}/../../../{{ login_vars_filename }}
    --vault-password-file {{ role_path }}/../../../{{ vault_filename }}
  changed_when: false
  when: "'$ANSIBLE_VAULT;' in config_content.stdout"

- name: Include variable file appliance_config.yml
  include_vars: "{{ role_path }}/../../../{{ login_vars_filename }}"
  no_log: true

- name: Save input variables from file
  set_fact:
    cobbler_password: "{{ provision_password }}"
  no_log: true

- name: Encrypt login_vars.yml
  command: >-
    ansible-vault encrypt {{ role_path }}/../../../{{ login_vars_filename }}
    --vault-password-file {{ role_path }}/../../../{{ vault_filename }}
  changed_when: false

- name: Update login_vars.yml permission
  file:
    path: "{{ role_path }}/../../../{{ login_vars_filename }}"
    mode: "{{ file_perm }}"