- name: ensure config dir
  file:
    path: "{{ ansible_env.HOME }}/.kube"
    state: directory

- name: copy secret content
  ansible.builtin.copy:
    content: "{{ k8s_config['ca.crt'] }}"
    dest: "{{ ansible_env.HOME }}/.kube/ca.crt"
    mode: "0600"

- name: setup config
  command: "{{ item }}"
  no_log: true
  loop:
    - "kubectl config set-cluster local --server='{{ k8s_config['server'] }}' --certificate-authority={{ ansible_env.HOME }}/.kube/ca.crt"
    - "kubectl config set-credentials local-token --token={{ k8s_config['token'] }}"
    - "kubectl config set-context local-context --cluster=local --user=local-token --namespace={{ k8s_config['namespace'] }}"
    - "kubectl config use-context local-context"
  environment:
    KUBECONFIG: "{{ ansible_env.HOME }}/.kube/config"