---
- name: k8s-CCM | download Hetzner CCM
  ansible.builtin.get_url:
    url: https://github.com/hetznercloud/hcloud-cloud-controller-manager/releases/download/v1.12.0/ccm-networks.yaml
    dest: /tmp/ccm.yaml
    mode: '0664'
  when:
  - inventory_hostname == groups['kube-master'][0]

- name: k8s-CCM | create secret for Hetzner CCM
  community.kubernetes.k8s:
    definition:
      api_version: v1
      kind: Secret
      metadata:
        namespace: kube-system
        name: hcloud
        label:
          app: ccm
          provider: hcloud
      type: Opaque
      data:
        network: "{{ stage | string | b64encode }}"
        token: "{{ hetzner_authentication_token | string | b64encode }}"
  when: 
  - inventory_hostname == groups['kube-master'][0]

- name: k8s-CCM | Apply Hetzner CCM manifest to the cluster.
  community.kubernetes.k8s:
    state: present
    src: /tmp/ccm.yaml
  when:
  - inventory_hostname == groups['kube-master'][0]