- name: Get project list
  command: "oc get projects -o json"
  changed_when: false
  register: results

- name: Find missing projects
  set_fact: new_projects="{{ ands_openshift_projects.keys() | difference (results.stdout | from_json | json_query('items[*].metadata.name')) }}"
  when: (results | succeeded)

- name: Create missing projects
  command: "oc adm new-project --description '{{ ands_openshift_projects[item] }}' {{ item }}"
  with_items: "{{ new_projects | default([]) }}"

- name: Allow projects to pull images from KaaS imagestreams
  command: "oc policy add-role-to-group system:image-puller system:serviceaccounts:{{ prj_item }} --namespace=kaas"
  with_items: "{{ ands_openshift_projects.keys() }}"
  when:
    prj_item != "kaas"
  loop_control: 
    loop_var: prj_item