- name: Gather all secrets
  ansible.builtin.set_fact:
    _ocp_secrets: "{{ hostvars[groups['jumphost'][0]] | dict2items | selectattr('key', 'contains', '_ocp_secrets_') }}"

- name: Prepare namespaces
  kubernetes.core.k8s:
    apply: true
    kubeconfig: ./kubeconfig
    validate:
      strict: true
      fail_on_error: true
    state: present
    definition:
      apiVersion: v1
      kind: Namespace
      metadata:
        name: "{{ item.value.namespace }}"
  loop: "{{ _ocp_secrets | default([]) }}"

- name: Deploy the secrets
  kubernetes.core.k8s:
    apply: true
    kubeconfig: ./kubeconfig
    validate:
      strict: true
      fail_on_error: true
    state: present
    definition:
      apiVersion: v1
      kind: Secret
      data: "{{ item.value.secrets }}"
      metadata:
        name: "{{ item.value.name }}"
        namespace: "{{ item.value.namespace }}"
        labels: "{{ item.value.labels | default({}) }}"
  loop: "{{ _ocp_secrets | default([]) }}"