# Post-update health check (quality gate).
# Detects whether Docker is installed and, if so, verifies that every
# container is in the running state. Results are appended to the update
# log as a "quality_gate" section, tied to the current update run via the
# os-updates preflight start timestamp.

- name: Healthcheck - Detect Docker binary
  ansible.builtin.command: which docker
  register: healthcheck_docker_bin
  changed_when: false
  failed_when: false

- name: Healthcheck - Record Docker presence
  ansible.builtin.set_fact:
    healthcheck_docker_installed: "{{ healthcheck_docker_bin.rc == 0 }}"

- name: Healthcheck - List all container names
  ansible.builtin.command: "docker ps -a --format {{ '{{' }}.Names{{ '}}' }}"
  register: healthcheck_all_containers
  changed_when: false
  when: healthcheck_docker_installed | bool

- name: Healthcheck - List running container names
  ansible.builtin.command: "docker ps --filter status=running --format {{ '{{' }}.Names{{ '}}' }}"
  register: healthcheck_running_containers
  changed_when: false
  when: healthcheck_docker_installed | bool

- name: Healthcheck - Evaluate container health
  ansible.builtin.set_fact:
    healthcheck_total_containers: "{{ healthcheck_all_containers.stdout_lines | length }}"
    healthcheck_running_count: "{{ healthcheck_running_containers.stdout_lines | length }}"
    healthcheck_non_running_containers: "{{ (healthcheck_all_containers.stdout_lines | difference(healthcheck_running_containers.stdout_lines)) | list }}"
  when: healthcheck_docker_installed | bool

- name: Healthcheck - Determine overall result
  ansible.builtin.set_fact:
    healthcheck_all_running: "{{ (healthcheck_non_running_containers | length) == 0 }}"
    healthcheck_passed: "{{ (healthcheck_non_running_containers | length) == 0 }}"
  when: healthcheck_docker_installed | bool

- name: Healthcheck - Default result when Docker is not installed
  ansible.builtin.set_fact:
    healthcheck_total_containers: 0
    healthcheck_running_count: 0
    healthcheck_non_running_containers: []
    healthcheck_all_running: true
    healthcheck_passed: true
  when: not (healthcheck_docker_installed | bool)

- name: Healthcheck - Ensure log directory exists
  ansible.builtin.file:
    path: "{{ healthcheck_log_file | dirname }}"
    state: directory
  delegate_to: localhost
  when: healthcheck_logging_enabled | bool

- name: Healthcheck - Write quality gate section to update log
  ansible.builtin.blockinfile:
    path: "{{ healthcheck_log_file }}"
    create: yes
    marker: "# {mark} ANSIBLE-HEALTHCHECK"
    block: |
      quality_gate:
        docker_installed: {{ healthcheck_docker_installed }}
        total_containers: {{ healthcheck_total_containers }}
        running_containers: {{ healthcheck_running_count }}
        all_running: {{ healthcheck_all_running }}
        non_running_containers:
      {% for c in healthcheck_non_running_containers %}
        - {{ c }}
      {% endfor %}
        healthcheck_passed: {{ healthcheck_passed }}
  delegate_to: localhost
  when: healthcheck_logging_enabled | bool

- name: Healthcheck - Fail when containers are unhealthy (quality gate)
  ansible.builtin.fail:
    msg: >-
      Quality gate failed: the following containers are not running:
      {{ healthcheck_non_running_containers | join(', ') }}
  when:
    - healthcheck_fail_on_unhealthy | bool
    - healthcheck_docker_installed | bool
    - not (healthcheck_all_running | bool)