Merge pull request #907 from phiv0/feature/server-download-delegation

Delegation support for download of Checkmk Server Setup & GPG Key

Author: robin-checkmk

changelogs/fragments/download_delegation.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - server role - Add support for optional delegation of downloading the Checkmk Server Setup and GPG Key.

roles/server/README.md

@@ -166,6 +166,16 @@ Backup options to use. By default no historic data is backed up, in order to cre
 Whether to allow downgrading a site's version.
 Note: this is not a recommended procedure, and will not be supported for enterprise customers.
 
+### Delegation
+
+    checkmk_server_delegate_download: "{{ inventory_hostname }}"
+
+Configure the host to which Checkmk Server Setup downloads are delegated to. After download the files are transferred to the remote node, when the remote node didn't do the download itself.
+
+    checkmk_server_gpg_delegate_download: "{{ checkmk_server_delegate_download }}"
+
+Configure the host to which Checkmk GPG Key downloads are delegated to. After download the files are transferred to the remote node, when the remote node didn't do the download itself.
+
 ## Tags
 
 Tasks are tagged with the following tags:

roles/server/defaults/main.yml

@@ -77,6 +77,10 @@ checkmk_server_backup_dir: '/tmp'
 checkmk_server_backup_opts: '--no-past'
 checkmk_server_allow_downgrades: 'false'
 
+## Delegation
+checkmk_server_delegate_download: "{{ inventory_hostname }}"
+checkmk_server_gpg_delegate_download: "{{ checkmk_server_delegate_download }}"
+
 ## HTTP Proxy
 checkmk_server_download_proxy: ''
 checkmk_server_gpg_download_proxy: "{{ checkmk_server_download_proxy }}"

roles/server/tasks/main.yml

@@ -72,6 +72,7 @@
         url_password: "{{ checkmk_server_download_pass | default(omit) }}"
       environment: "{{ __proxy_env | default(omit) }}"
       retries: 3
+      delegate_to: "{{ checkmk_server_delegate_download }}"
       tags:
         - download-package
 
@@ -85,6 +86,25 @@
         url_password: "{{ checkmk_server_gpg_download_pass | default(omit) }}"
       environment: "{{ __proxy_env | default(omit) }}"
       retries: 3
+      delegate_to: "{{ checkmk_server_gpg_delegate_download }}"
+      tags:
+        - download-gpg-key
+
+    - name: "Transfer Checkmk Server Setup."
+      ansible.builtin.copy:
+        src: "{{ __checkmk_server_tmp_dir }}/{{ __checkmk_server_setup_file }}"
+        dest: "{{ __checkmk_server_tmp_dir }}/{{ __checkmk_server_setup_file }}"
+        mode: "0644"
+      when: checkmk_server_delegate_download != inventory_hostname
+      tags:
+        - download-package
+
+    - name: "Transfer Checkmk GPG Key."
+      ansible.builtin.copy:
+        src: "{{ __checkmk_server_tmp_dir }}/Check_MK-pubkey.gpg"
+        dest: "{{ __checkmk_server_tmp_dir }}/Check_MK-pubkey.gpg"
+        mode: "0644"
+      when: checkmk_server_gpg_delegate_download != inventory_hostname
       tags:
         - download-gpg-key