---
- name: Render Dex values without a cluster or real secrets
  hosts: localhost
  connection: local
  gather_facts: false
  vars:
    role_path: /roles/ansible-role-dex
  tasks:
    - name: Load defaults
      ansible.builtin.include_vars: ../defaults/main.yml
    - name: Set fake isolated credentials
      ansible.builtin.set_fact:
        dex_postgres_password: fixture-not-a-real-password
        dex_ldap_bind_password: fixture-not-a-real-password
        dex_matrix_client_enabled: true
        matrix_dex_oidc_client_id: matrix-fixture
        matrix_dex_oidc_client_secret: fixture-not-a-real-client-secret
        dex_theme_enabled: true
    - name: Render default values
      ansible.builtin.template:
        src: ../templates/values.yml.j2
        dest: /tmp/dex-values.yml
        mode: "0600"
    - name: Set optional settings
      ansible.builtin.set_fact:
        dex_theme_enabled: false
        dex_matrix_client_enabled: false
        dex_ldap_insecure_no_ssl: false
        dex_ldap_start_tls: true
        dex_ldap_root_ca: /etc/dex-ca/ldap.pem
        dex_ca_secret_name: ldap-ca
        dex_env_secret_name: dex-client-secrets
        dex_static_clients:
          - id: www-membership
            name: Example Membership
            secretEnv: WWW_DEX_CLIENT_SECRET
            redirectURIs: [https://www.example.com/members/oidc/callback/]
    - name: Render optional values
      ansible.builtin.template:
        src: ../templates/values.yml.j2
        dest: /tmp/dex-values-optional.yml
        mode: "0600"
    - name: Set empty optional lists
      ansible.builtin.set_fact:
        dex_ca_secret_name: ""
        dex_env_secret_name: ""
        dex_static_clients: []
    - name: Render minimal values
      ansible.builtin.template:
        src: ../templates/values.yml.j2
        dest: /tmp/dex-values-minimal.yml
        mode: "0600"