---

- name: Set up primary
  become: yes
  ansible.builtin.command:
    cmd: '/bin/bash -c "K3S_KUBECONFIG_MODE=644 /usr/local/sbin/get-k3s.sh"'
    creates: /etc/systemd/system/k3s.service

- name: Check the token
  become: yes
  ansible.builtin.command:
    cmd: 'cat /var/lib/rancher/k3s/server/node-token'
  register: k3s_token_cat

- name: Ensure the token is in vault
  assert:
    that: k3s_token_cat.stdout_lines[0] is in secrets['Geth']['k3s_token']

- name: Enable k3s
  become: yes
  ansible.builtin.service:
    name: k3s
    state: restarted
    enabled: yes