---
# Uses the controller's kubeconfig. Required inputs have no invented image defaults.
- name: Deploy eom.dev Luanti WASM client
  hosts: alpha-control-plane
  become: true
  vars_files:
    - ../secrets.yaml
  vars:
    luanti_wasm_namespace: luanti-wasm
    luanti_wasm_name: luanti-wasm
    luanti_wasm_web_image: ericomeehan/luanti-wasm:latest
    luanti_wasm_proxy_image: ericomeehan/luanti-wasm-proxy:latest
    luanti_wasm_game_cidrs: 
      - 10.0.0.0/8
    luanti_wasm_https_cidrs:
      - 0.0.0.0/8
    luanti_wasm_ingress_enabled: true
    luanti_wasm_hostname: luanti.eom.dev
    luanti_wasm_ingress_class: nginx
    luanti_wasm_tls_enabled: true
    luanti_wasm_tls_secret_name: luanti-wasm-tls
    luanti_wasm_cluster_issuer: ca-issuer
  pre_tasks:
    - name: Require explicit eom build images and destination networks
      ansible.builtin.assert:
        that:
          - luanti_wasm_web_image | default('') | length > 0
          - luanti_wasm_proxy_image | default('') | length > 0
        fail_msg: Supply eom_luanti_wasm_web_image, eom_luanti_wasm_proxy_image, and eom_luanti_wasm_game_cidrs.
  roles:
    - roles/ericomeehan.luanti-wasm