- name: deploy OpenTofu resource
  connection: local
  block:
    - name: find terraform binary
      ansible.builtin.command:
        cmd: bash -c 'command -v terraform || command -v tofu || echo /usr/local/bin/terraform'
      register: located_tf_binary
      when: terraform_binary_path is undefined
      changed_when: false

    - name: set terraform binary
      ansible.builtin.set_fact:
        terraform_binary_path: '{{ terraform_binary_path | default(located_tf_binary.stdout, true) }}'
      when: terraform_binary_path is undefined

    - name: create temp directory
      ansible.builtin.tempfile:
        state: directory
      register: tmp_file
      changed_when: false
      when: item.storage_dir is not defined

    - name: set target directory for git repository
      ansible.builtin.set_fact:
        git_clone_dir: '{{ item.storage_dir | default(tmp_file.path, true) }}'

    - name: fetch git repository
      ansible.builtin.git:
        repo: '{{ item.git_repository }}'
        dest: '{{ git_clone_dir }}'
        version: '{{ item.git_revision }}'
        force: true

    - name: prepare variables file
      ansible.builtin.copy:
        content: '{{ item.tfvars_content }}'
        dest: '{{ git_clone_dir }}/{{ item.terraform_dir }}/terraform.tfvars'
        mode: '0500'
        force: true

    - name: prepare tfstate file
      ansible.builtin.copy:
        src: '{{ item.tfstate_path }}'
        dest: '{{ git_clone_dir }}/{{ item.terraform_dir }}/terraform.tfstate'
        force: true
        mode: '0600'
      when: git_clone_dir not in item.tfstate_path

    - name: deploy k8s resources
      community.general.terraform:
        binary_path: "{{ terraform_binary_path }}"
        project_path: '{{ git_clone_dir }}/{{ item.terraform_dir}}'
        provider_upgrade: true
        force_init: true

    - name: backup source stored state
      ansible.builtin.copy:
        src: '{{ item.tfstate_path }}'
        dest: '{{ item.tfstate_path }}.ansible.backup'
        force: true
        mode: '0600'

    - name: update source tfstate file
      ansible.builtin.copy:
        src: '{{ git_clone_dir }}/{{ item.terraform_dir}}/terraform.tfstate'
        dest: '{{ item.tfstate_path }}'
        force: true
        mode: '0600'
      when: git_clone_dir not in item.tfstate_path

    - name: cleanup
      ansible.builtin.file:
        path: '{{ tmp_file.path }}'
        state: absent
      when: item.storage_dir is not defined