---
- name: 读取现有实例管理凭据
  ansible.builtin.import_playbook: credentials.yml
- name: 将 Ayatori 身份交付到独立路径（不携带 superuser 凭据）
  hosts: localhost
  connection: local
  gather_facts: false
  tasks:
    - name: 逐实例 CAS 创建并核对，只接受一致的已有值
      ansible.builtin.include_tasks: tasks/ayatori-credential.yml
      loop: [prod, dev]
      loop_control:
        loop_var: pg_ayatori_instance