---
- name: Test role
  hosts: ipaclients, ipaserver
  become: no
  gather_facts: no

  tasks:
  - name: Include FreeIPA facts.
    ansible.builtin.include_tasks: ../env_freeipa_facts.yml

  # Test will only be executed if host is not a server.
  - name: Execute with server context in the client.
    iparole:
      ipaadmin_password: SomeADMINpassword
      ipaapi_context: server
      name: ThisShouldNotWork
    register: result
    failed_when: not (result.failed and result.msg is regex("No module named '*ipaserver'*"))
    when: ipa_host_is_client

# Import basic module tests, and execute with ipa_context set to 'client'.
# If ipaclients is set, it will be executed using the client, if not,
# ipaserver will be used.
#
# With this setup, tests can be executed against an IPA client, against
# an IPA server using "client" context, and ensure that tests are executed
# in upstream CI.

- name: Test role using client context, in client host.
  ansible.builtin.import_playbook: test_role.yml
  when: groups['ipaclients']
  vars:
    ipa_test_host: ipaclients

- name: Test role using client context, in server host.
  ansible.builtin.import_playbook: test_role.yml
  when: groups['ipaclients'] is not defined or not groups['ipaclients']
  vars:
    ipa_context: client