- name: Ensure Grafana OIDC secret exists
  kubernetes.core.k8s:
    state: present
    definition:
      apiVersion: v1
      kind: Secret
      metadata:
        name: grafana-oidc-secret
        namespace: monitoring
      type: Opaque
      stringData:
        GRAFANA_OIDC_CLIENT_ID: "{{ lookup('proton_pass', item_title='Grafana OIDC', vault_name='Home Lab', field='Client ID') }}"
        GRAFANA_OIDC_CLIENT_SECRET: "{{ lookup('proton_pass', item_title='Grafana OIDC', vault_name='Home Lab', field='Client secret') }}"
  no_log: true
  run_once: true

- name: Ensure kube-prometheus-stack is installed
  kubernetes.core.helm:
    release_name: prometheus
    release_namespace: monitoring
    chart_ref: oci://ghcr.io/prometheus-community/charts/kube-prometheus-stack
    chart_version: "{{ prometheus_chart_version }}"
    create_namespace: true
    values: "{{ prometheus_values }}"
  run_once: true