---
- name: Verify mariadb_primary inventory variables resolve (including vault)
  hosts: mariadb_primary
  connection: local
  gather_facts: false
  become: false

  tasks:
    - name: Require MariaDB admin credentials
      ansible.builtin.assert:
        that:
          - k3s_mariadb_admin_user | default('') | length > 0
          - k3s_mariadb_admin_password | default('') | length > 0
        fail_msg: "Expected k3s_mariadb_admin_user and vaulted k3s_mariadb_admin_password to be defined."

    - name: Require k3s datastore MariaDB password
      ansible.builtin.assert:
        that:
          - k3s_datastore_mariadb_password | default('') | length > 0
        fail_msg: "Expected vaulted k3s_datastore_mariadb_password to be defined (directly or derived from a vaulted var)."