# SKIP_ARMV7=1（默认）：仅 noop（文档 + ansible/files）。
# SKIP_ARMV7=0 且设置 ARMV7_SSH：经 SSH 在 armv7/arm32 主机上 dnf 安装 docker 并校验（Fedora/RHEL 系，见 docs/01-03）。
- name: 01-03 armv7 Docker（矩阵 + 可选远程安装）
  hosts: localhost
  gather_facts: false
  vars:
    repo_root: "{{ playbook_dir }}/../../.."
    doc_id: "01-03"
    doc_filename: "01-03-armv7-standalone-docker.md"
    skip_armv7: "{{ lookup('env', 'SKIP_ARMV7') | default('1', true) | trim }}"
    armv7_ssh: "{{ lookup('env', 'ARMV7_SSH') | default('', true) | trim }}"
  tasks:
    - name: Baseline docs/files checks
      block:
        - name: Assert docs file exists
          ansible.builtin.stat:
            path: "{{ repo_root }}/docs/{{ doc_filename }}"
          register: _doc_stat

        - name: Fail when docs file missing
          ansible.builtin.assert:
            that:
              - _doc_stat.stat.exists
            fail_msg: "docs file missing: docs/{{ doc_filename }}"

        - name: Find matching ansible/files doc_id directory
          ansible.builtin.find:
            paths: "{{ repo_root }}/ansible/files"
            file_type: directory
            patterns: "{{ doc_id }}"
            use_regex: false
          register: _files_dirs

        - name: Fail when ansible/files doc_id directory missing
          ansible.builtin.assert:
            that:
              - _files_dirs.matched | int >= 1
            fail_msg: "ansible/files missing doc_id directory: ansible/files/{{ doc_id }}"

        - name: Show noop verification summary
          ansible.builtin.debug:
            msg:
              - "doc_id={{ doc_id }}"
              - "doc={{ doc_filename }}"
              - "files_dirs={{ _files_dirs.files | map(attribute='path') | list }}"

        - name: Verify cluster reachable (kubectl get nodes) [runbook baseline]
          ansible.builtin.shell: |
            set -euo pipefail
            KUBECONFIG={{ k3s_kubeconfig | default('/etc/rancher/k3s/k3s.yaml') }} kubectl get nodes
          args:
            executable: /bin/bash
          delegate_to: "{{ groups['k3s_server'][0] }}"
          become: true
          run_once: true
          changed_when: false

        - name: Verify core namespace exists (kube-system) [runbook baseline]
          ansible.builtin.shell: |
            set -euo pipefail
            KUBECONFIG={{ k3s_kubeconfig | default('/etc/rancher/k3s/k3s.yaml') }} kubectl get ns kube-system
          args:
            executable: /bin/bash
          delegate_to: "{{ groups['k3s_server'][0] }}"
          become: true
          run_once: true
          changed_when: false

        - name: Find YAML manifests under ansible/files doc_id dirs
          ansible.builtin.find:
            paths: "{{ _files_dirs.files | map(attribute='path') | list }}"
            file_type: file
            patterns:
              - "*.yml"
              - "*.yaml"
            recurse: true
            use_regex: false
          register: _files_manifests

        - name: Show manifest count summary
          ansible.builtin.debug:
            msg:
              - "doc_id={{ doc_id }}"
              - "manifest_files={{ _files_manifests.matched | default(0) }}"
              - "manifest_paths={{ (_files_manifests.files | map(attribute='path') | list)[:12] }}"

        - name: Server-side dry-run apply (kubectl apply --dry-run=server) [doc assertion]
          ansible.builtin.shell: |
            set -euo pipefail
            KUBECONFIG={{ k3s_kubeconfig | default('/etc/rancher/k3s/k3s.yaml') }} \
              kubectl apply --dry-run=server -f "{{ item.path }}"
          args:
            executable: /bin/bash
          loop: "{{ _files_manifests.files }}"
          loop_control:
            label: "{{ item.path }}"
          delegate_to: "{{ groups['k3s_server'][0] }}"
          become: true
          run_once: true
          changed_when: false
          when: (_files_manifests.matched | default(0) | int) > 0

    - name: Fail when SKIP_ARMV7=0 but ARMV7_SSH empty
      ansible.builtin.fail:
        msg: "SKIP_ARMV7=0 但未设置 ARMV7_SSH（见 scripts/.env.verify.example）"
      when: skip_armv7 == '0' and armv7_ssh | length == 0

    - name: Note skipping remote arm install
      ansible.builtin.debug:
        msg: "SKIP_ARMV7={{ skip_armv7 }}：跳过 arm 远程安装。若需安装：SKIP_ARMV7=0 且 export ARMV7_SSH='ssh -o BatchMode=yes user@arm-host'"
      when: skip_armv7 != '0' or armv7_ssh | length == 0

    - name: Remote Docker install (dnf on arm)
      when: skip_armv7 == '0' and armv7_ssh | length > 0
      block:
        - name: Check docker on armv7 host
          ansible.builtin.shell: "{{ armv7_ssh }} docker version"
          register: armv7_docker_check
          changed_when: false
          failed_when: false

        - name: Install Docker and enable service (dnf)
          ansible.builtin.shell: "{{ armv7_ssh }} 'sudo dnf install -y docker && sudo systemctl enable --now docker'"
          when: armv7_docker_check.rc != 0

        - name: Verify docker version and ps
          ansible.builtin.shell: "{{ armv7_ssh }} docker version && {{ armv7_ssh }} docker ps -a"
          changed_when: false