# vim: set filetype=yaml.ansible :
---
- name: Add hashicorp
  when:
    - hashicorp_configured is undefined
  block:
    - name: Load hashicorp repo config
      ansible.builtin.include_tasks:
        file: config/hashicorp.yml

    - name: RedHat repository
      when:
        - ansible_os_family == 'RedHat'
      block:
        - name: Enable hashicorp repo
          become: true
          ansible.builtin.get_url:
            url: "{{ hashicorp.repo }}"
            dest: /etc/yum.repos.d/hashicorp.repo
            mode: '0644'

    - name: Debian based repository
      when:
        - ansible_os_family == 'Debian'
      block:
        - name: Get hashicorp archive gpg key
          ansible.builtin.get_url:
            dest: "{{ d_tempdir.path }}/hashicorp_gpg"
            url: https://apt.releases.hashicorp.com/gpg
            mode: '0644'

        - name: Install hashicorp archive gpg key
          become: true
          ansible.builtin.command:
            creates: /usr/share/keyrings/hashicorp-archive-keyring.gpg
            cmd:
              - gpg
              - --dearmor
              - -o
              - /usr/share/keyrings/hashicorp-archive-keyring.gpg
              - "{{ d_tempdir.path }}/hashicorp_gpg"

        - name: Enable hasicorp repo for debian
          ansible.builtin.apt_repository:
            repo: "{{ pkgconfig.hashicorp.Linux.Debian.repo }}"
            state: present
            update_cache: false

    - name: MacOS specific configuration
      when:
        - ansible_distribution == 'MacOSX'
      ansible.builtin.set_fact:
        brewtap: "{{ brewtap + ['hashicorp/tap'] }}"

    - name: Set hashicorp_configured
      ansible.builtin.set_fact:
        hashicorp_configured: true