- name:
    make temp directory for service account key and trigger `clean_up_tempfile`.
  delegate_to: 127.0.0.1
  tempfile:
    state: directory
  register: service_account_key
  notify: clean_up_tempfile

- name: Extract service account key
  delegate_to: 127.0.0.1
  command:
    argv:
      - '{{ all.repo_root }}/kube/secrets/get-secret-at-path.sh'
      - etc
      - '{{ copy_service_account_key__name }}'
      - '.data."key.json"'
      - '{{ service_account_key.path }}/application_default_credentials.json'
    creates:
      '{{ service_account_key.path }}/application_default_credentials.json'

- name: Copy service account key posix.
  import_tasks: posix.yml
  when: ansible_facts['system']|lower in ['linux', 'darwin']

- name: Copy service account key win.
  import_tasks: win.yml
  when: ansible_facts['system']|lower == 'win32nt'