From 0efc0c68874c9b6e8e0f253e026b5a482abc53a0 Mon Sep 17 00:00:00 2001
From: "pulsar89.5" <pulsar@ykn.fr>
Date: Fri, 21 Apr 2023 16:32:34 +0200
Subject: [PATCH] [EVO] Ajouter les scripts de notifications

---
 README.md               |  7 +++++++
 defaults/main.yml       |  2 ++
 meta/main.yml           |  7 +++++++
 tasks/main.yml          | 23 ++++++++++++++++++++++-
 templates/keepalived.j2 |  4 ++++
 5 files changed, 42 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index c2eea88..32eb8ae 100644
--- a/README.md
+++ b/README.md
@@ -58,6 +58,13 @@ Passer en unicast en utilisant cette liste d'IP.
 
 *<span style="text-decoration: underline">Valeur par défaut:</span> aucune*
 
+### keepalived_notify_script_enabled
+
+Booléen permettant d'activer le script de notification.<br>
+Le script est déployé dans `/etc/keepalived/notify.sh`.
+
+*<span style="text-decoration: underline">Valeur par défaut:</span> `false`*
+
 ### keepalived_track_scripts
 
 Liste de script dont le code retour doit être à zéro pour que le membre conserve ou puisse prendre l'IP de failover.
diff --git a/defaults/main.yml b/defaults/main.yml
index 6b2b021..b1aea24 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -13,6 +13,8 @@ keepalived_ipv6: ""
 
 keepalived_peers: []
 
+keepalived_notify_script_enabled: false
+
 keepalived_track_scripts: []
 # Exemple:
 #  - name: check_haproxy_8080
diff --git a/meta/main.yml b/meta/main.yml
index 5f58a50..a2647e9 100644
--- a/meta/main.yml
+++ b/meta/main.yml
@@ -14,3 +14,10 @@ galaxy_info:
 
 dependencies:
   - role: users
+    vars:
+      users:
+        - name: keepalived_script
+          comment: "Dedicated user for keepalived script"
+          update_password: on_create
+          password_lock: true
+          shell: /bin/bash
diff --git a/tasks/main.yml b/tasks/main.yml
index d0a1d7a..3dceada 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -1,7 +1,7 @@
 ---
 # tasks file for keepalived
 
-- name: Installer keepalived
+- name: Installer le paquet
   ansible.builtin.apt:
     name: keepalived
   become: true
@@ -15,3 +15,24 @@
     dest: /etc/keepalived/keepalived.conf
   become: true
   notify: Redémarrer keepalived.service
+
+- name: Déployer les scripts
+  ansible.builtin.copy:
+    src: keepalived/notify.sh
+    dest: /etc/keepalived/
+    owner: keepalived_script
+    group: keepalived_script
+    mode: u=rx,g=rx,o=
+  when: keepalived_notify_script_enabled
+  become: true
+  notify: Redémarrer keepalived.service
+
+- name: Déployer le fichier de configuration de sudoers
+  ansible.builtin.copy:
+    src: keepalived/sudoers
+    dest: /etc/sudoers.d/keepalived
+    owner: root
+    group: root
+    mode: u=rw,g=r,o=r
+    validate: /usr/sbin/visudo -cf %s
+  become: true
diff --git a/templates/keepalived.j2 b/templates/keepalived.j2
index 75f98e1..a14f075 100644
--- a/templates/keepalived.j2
+++ b/templates/keepalived.j2
@@ -62,6 +62,10 @@ vrrp_instance VIP_{{ keepalived_uid }} {
   }
 {% endif %}
 
+{% if keepalived_notify_script_enabled %}
+  notify /etc/keepalived/notify.sh
+{% endif %}
+
 {% if keepalived_track_scripts | length > 0 %}
   track_script {
 {% for script in keepalived_track_scripts %}