---
- name: Get Keycloak admin token
  uri:
    url: "http://{{ keycloak_route.stdout }}/auth/realms/master/protocol/openid-connect/token"
    method: POST
    body:
      username: "{{ sso_admin_username.stdout }}"
      password: "{{ sso_admin_password.stdout }}"
      grant_type: "password"
      client_id: "admin-cli"
    body_format: form-urlencoded
    status_code: 200,201,204
  register: sso_admin_token

- name: Add user to Che
  uri:
    url: "http://{{ keycloak_route.stdout }}/auth/admin/realms/codeready/users"
    method: POST
    headers:
      Authorization: "Bearer {{ sso_admin_token.json.access_token }}"
    body:
      username: "{{ _namespace }}"
      enabled: true
      emailVerified: true
      firstName: "{{ _account_name }}"
      lastName: Developer
      email: "{{ _namespace }}@workshop.com"
      credentials:
        - type: password
          value: "{{ _account_password }}"
          temporary: false
    body_format: json
    status_code: 201,409

- name: Get Che user token
  uri:
    url: "http://{{ keycloak_route.stdout }}/auth/realms/codeready/protocol/openid-connect/token"
    method: POST
    body:
      username: "{{ _namespace }}"
      password: "{{ _account_password }}"
      grant_type: "password"
      client_id: "admin-cli"
    body_format: form-urlencoded
    status_code: 200
  register: user_token

- name: Create Che workspace
  uri:
    url: "http://{{ che_route.stdout }}/api/workspace/devfile?namespace={{ _namespace }}&attribute=stackName:Red+Hat+Fuse&start-after-create=true"
    method: POST
    headers:
      Authorization: "Bearer {{ user_token.json.access_token }}"
    body: "{{ lookup('template', role_path ~ '/templates/codeready-workspaces/workspace.j2') }}"
    body_format: json
    status_code: 201,409

- name: todo
  debug:
    msg: "TODO: Deploy quarkus workspace and other plugins needed by pam/dm"