---
# Copyright 2014, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- name: Regen pem # noqa: no-changed-when
  ansible.builtin.shell: |
      {
      files=(
          "{{ item_base_path ~ '.crt' }}"
          "$(test -f {{ item_base_path  ~ '-ca.crt' }} && echo {{ item_base_path  ~ '-ca.crt' }})"
          "{{ item_base_path  ~ '.key' }}"
      )
      for f in "${files[@]}"; do
          cat "$f"
          # adds a newline at the end of file's content if it doesn't exist
          tail -c1 "$f" | grep -q '^$' || echo
        done
      } > {{ target_base_path  ~ '.pem' }}
  args:
    executable: /bin/bash
  vars:
    item_interface: "{{ item['interface'] | default('') }}"
    item_name: "{{ ('interface' in item and item['interface'] is truthy) | ternary(item['address'] ~ '-' ~ item_interface, item['address']) }}"
    item_base_path: "{{ haproxy_ssl_temp_path ~ '/haproxy_' ~ ansible_facts['hostname'] ~ '-' ~ item_name }}"
    target_base_path: "{{ haproxy_ssl_cert_path ~ '/haproxy_' ~ ansible_facts['hostname'] ~ '-' ~ item_name }}"
  with_items: "{{ haproxy_vip_binds }}"
  listen:
    - haproxy cert installed

- name: Regenerate maps
  vars:
    all_changed_results: "{{ (map_create.results + map_delete.results) | select('changed') }}"
  ansible.builtin.assemble:
    src: "/etc/haproxy/map.conf.d/{{ item }}"
    dest: "/etc/haproxy/{{ item }}.map"
    mode: "0640"
    owner: haproxy
    group: haproxy
  with_items: "{{ all_changed_results | map(attribute='item') | flatten | selectattr('name', 'defined') | map(attribute='name') | unique }}"

- name: Regenerate haproxy configuration
  ansible.builtin.assemble:
    src: "/etc/haproxy/conf.d"
    dest: "/etc/haproxy/haproxy.cfg"
    validate: /usr/sbin/haproxy -c -f %s
    mode: "0640"
    owner: haproxy
    group: haproxy
  tags:
    - haproxy-general-config

- name: Get package facts
  ansible.builtin.package_facts:
    manager: auto
  listen: Restart rsyslog

- name: Restart rsyslog
  ansible.builtin.service:
    name: "rsyslog"
    state: "restarted"
    enabled: true
    daemon_reload: true
  when:
    - "'rsyslog' in ansible_facts.packages"

- name: Reload haproxy
  ansible.builtin.service:
    name: "haproxy"
    state: "reloaded"
    enabled: true
    daemon_reload: true
  listen:
    - Regen pem
    - Regenerate maps
    - Regenerate haproxy configuration