---
- name: Install A13Labs systools
  hosts: ubuntu
  gather_facts: true

# Specific tasks for this playbook
  tasks:
    - name: Set required facts
      ansible.builtin.set_fact:
        systools_verion: " {{ systools_version | default('0.0.1') }}"
      tags: always

    - name: Download systools zip file
      ansible.builtin.get_url:
        url: https://github.com/a13labs/systools/releases/download/v{{ systools_version }}/systools-v{{ systools_version }}-linux-amd64.zip
        dest: /tmp/systools-v{{ systools_version }}-linux-amd64.zip
        mode: '0644'

    - name: Unpack systools zip file
      ansible.builtin.unarchive:
        src: /tmp/systools-v{{ systools_version }}-linux-amd64.zip
        dest: /usr/local/bin
        remote_src: true
        mode: '0755'
        extra_opts:
          - -j

    - name: Remove systools zip file
      ansible.builtin.file:
        path: /tmp/systools-v{{ systools_version }}-linux-amd64.zip
        state: absent

    - name: Set root-only executable permissions for specific tools
      ansible.builtin.file:
        path: /usr/local/bin/{{ item }}
        mode: '0700'
      loop:
        - open_volume
        - read_system_id
        - k8s_encryption_provider