---

- name: Test host principal

  hosts: ipaserver

  become: true

  tasks:

  - name: Get Domain from server name

    set_fact:

      ipaserver_domain: "{{ groups.ipaserver[0].split('.')[1:] | join ('.') }}"

    when: ipaserver_domain is not defined

  - name: Get Realm from server name

    set_fact:

      ipaserver_realm: "{{ groups.ipaserver[0].split('.')[1:] | join ('.') | upper }}"

    when: ipaserver_realm is not defined

  - name: Set host1_fqdn

    set_fact:

      host1_fqdn: "{{ 'host1.' + ipaserver_domain }}"

  - name: Host host1 absent

    ipahost:

      ipaadmin_password: MyPassword123

      name:

      - "{{ host1_fqdn }}"

      update_dns: yes

      state: absent

  - name: Host host1... present with principal host/testhost1...

    ipahost:

      ipaadmin_password: MyPassword123

      name: "{{ host1_fqdn }}"

      principal:

      - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}" 

      force: yes

    register: result

    failed_when: not result.changed

  - name: Host host1... principal host/host1... present (existing already)

    ipahost:

      ipaadmin_password: MyPassword123

      name: "{{ host1_fqdn }}"

      principal:

      - "{{ 'host/host1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      action: member

    register: result

    failed_when: result.changed

  - name: Host host1... principal host/testhost1... present again

    ipahost:

      ipaadmin_password: MyPassword123

      name: "{{ host1_fqdn }}"

      principal: "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      action: member

    register: result

    failed_when: result.changed

  - name: Host host1... principal host/testhost1... absent

    ipahost:

      ipaadmin_password: MyPassword123

      name: "{{ host1_fqdn }}"

      principal: "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      action: member

      state: absent

    register: result

    failed_when: not result.changed

  - name: Host host1... principal host/testhost1... absent again

    ipahost:

      ipaadmin_password: MyPassword123

      name: "{{ host1_fqdn }}"

      principal: "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      action: member

      state: absent

    register: result

    failed_when: result.changed

  - name: Host host1... principal host/testhost1... and host/myhost1... present

    ipahost:

      ipaadmin_password: MyPassword123

      name: "{{ host1_fqdn }}"

      principal:

      - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      - "{{ 'host/myhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      action: member

    register: result

    failed_when: not result.changed

  - name: Host host1... principal host/testhost1... and host/myhost1... present again

    ipahost:

      ipaadmin_password: MyPassword123

      name: "{{ host1_fqdn }}"

      principal:

      - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      - "{{ 'host/myhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      action: member

    register: result

    failed_when: result.changed

  - name: Host host1... principal host/testhost1... and host/myhost1... absent

    ipahost:

      ipaadmin_password: MyPassword123

      name: "{{ host1_fqdn }}"

      principal:

      - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      - "{{ 'host/myhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      action: member

      state: absent

    register: result

    failed_when: not result.changed

  - name: Host host1... principal host/testhost1... and host/myhost1... absent again

    ipahost:

      ipaadmin_password: MyPassword123

      name: "{{ host1_fqdn }}"

      principal:

      - "{{ 'host/testhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      - "{{ 'host/myhost1.' + ipaserver_domain + '@' + ipaserver_realm }}"

      action: member

      state: absent

    register: result

    failed_when: result.changed

  - name: Host host1... absent

    ipahost:

      ipaadmin_password: MyPassword123

      name:

      - "{{ host1_fqdn }}"

      update_dns: yes

      state: absent