---
- name: Test hbacsvc
  hosts: "{{ ipa_test_host | default('ipaserver') }}"
  become: true
  gather_facts: false

  tasks:
  - name: Ensure HBAC Service for http is absent
    ipahbacsvc:
      ipaadmin_password: SomeADMINpassword
      ipaapi_context: "{{ ipa_context | default(omit) }}"
      name: http,tftp
      state: absent

  - name: Ensure HBAC Service for http is present
    ipahbacsvc:
      ipaadmin_password: SomeADMINpassword
      ipaapi_context: "{{ ipa_context | default(omit) }}"
      name: http
    register: result
    failed_when: not result.changed or result.failed

  - name: Ensure HBAC Service for http is present again
    ipahbacsvc:
      ipaadmin_password: SomeADMINpassword
      ipaapi_context: "{{ ipa_context | default(omit) }}"
      name: http
    register: result
    failed_when: result.changed or result.failed

  - name: Ensure HBAC Service for tftp is present
    ipahbacsvc:
      ipaadmin_password: SomeADMINpassword
      ipaapi_context: "{{ ipa_context | default(omit) }}"
      name: tftp
      description: TFTP service
    register: result
    failed_when: not result.changed or result.failed

  - name: Ensure HBAC Service for tftp is present again
    ipahbacsvc:
      ipaadmin_password: SomeADMINpassword
      ipaapi_context: "{{ ipa_context | default(omit) }}"
      name: tftp
      description: TFTP service
    register: result
    failed_when: result.changed or result.failed

  - name: Ensure HBAC Services for http and tftp are absent
    ipahbacsvc:
      ipaadmin_password: SomeADMINpassword
      ipaapi_context: "{{ ipa_context | default(omit) }}"
      name: http,tftp
      state: absent
    register: result
    failed_when: not result.changed or result.failed

  - name: Ensure HBAC Services for http and tftp are absent again
    ipahbacsvc:
      ipaadmin_password: SomeADMINpassword
      ipaapi_context: "{{ ipa_context | default(omit) }}"
      name: http,tftp
      state: absent
    register: result
    failed_when: result.changed or result.failed