- name: Ensure base packages
  apt:
    name: [curl, jq, gnupg, ca-certificates]
    state: present
    update_cache: yes

- name: Install Helm if missing
  shell: |
    if ! command -v helm >/dev/null 2>&1; then
      curl -fsSL https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
    fi
  args:
    executable: /bin/bash

- name: Ensure kube config dir
  file:
    path: /root/.kube
    state: directory
    mode: "0700"