---
- name: Skip Newt when not enabled
  ansible.builtin.debug:
    msg: "noble_newt_install is false — set PANGOLIN_ENDPOINT, NEWT_ID, NEWT_SECRET in repo .env (or create the Secret manually) and set noble_newt_install=true to deploy Newt."
  when: not (noble_newt_install | bool)

- name: Create Newt namespace
  ansible.builtin.command:
    argv:
      - kubectl
      - apply
      - -f
      - "{{ noble_repo_root }}/clusters/noble/apps/newt/namespace.yaml"
  environment:
    KUBECONFIG: "{{ noble_kubeconfig }}"
  when: noble_newt_install | bool
  changed_when: true

- name: Apply Newt Pangolin auth Secret from repository .env (optional)
  ansible.builtin.include_tasks: from_env.yml
  when: noble_newt_install | bool

- name: Install Newt chart
  ansible.builtin.command:
    argv:
      - helm
      - upgrade
      - --install
      - newt
      - fossorial/newt
      - --namespace
      - newt
      - --version
      - "1.2.0"
      - -f
      - "{{ noble_repo_root }}/clusters/noble/apps/newt/values.yaml"
      - --wait
  environment:
    KUBECONFIG: "{{ noble_kubeconfig }}"
  when: noble_newt_install | bool
  changed_when: true