Task:

{
    'app': str, # lu-ai [MANDATORY]
    'module': str, # balance-api [MANDATORY]
    'server': str, # vtluuxapi11 [MANDATORY]
    'profile': str, # /prod/dl/ref/java/lu-ai/balance-api/.profile [MANDATORY]
    'npa_list': List[Npa],
    'restart_command': str, # perl /prod/dl/ref/bin/jluai_balance_api.pl vl=action=restart [OPTIONAL]
    'mail': str, # [email protected] [MANDATORY]
}

Npa:

{
    'name': str, # name in the .profile
    'c0': str, # cyberark code
    'encoding': str, # MD5 / SHA512
}

main.yml:

• fetch configs from all servers and convert them into tasks (role fetch_config)
• Handle each task (role process_task)

process_task:

• Initialize change flag to False (will be evaluated to know if notif should be sent)
• Get NPAs passwords from cyberark (role get_npa_password)
• Update NPAs in .profile if needed (role update_npa_file)
• Restart module if restart command provided and .profile was updated (role restart_module)
• Send mail notification if restart command provided and restart successful, or if .profile changed (role send_mail)
• Send error mail if any part failed (role send_mail)

fetch_config:

• Cleanup old directories
• Fetch configurations on server
• Transform them into a list of tasks using generate_tasks.py

get_npa_password:

• TO BE DONE ! -> should add the (new) cyberark password in the npa object so that it can then be processed

restart_module:

• use the provided command (if any) to restart the module

send_mail:

• TO BE DONE ! -> send a mail

update_npa_file:

• TO BE DONE ! -> get NPA pass from .profile and compare them to the cyberark pass. If any changes, backup the .profile and rewrite it with the new values

• main.yml -> should be ok
• fetch_config -> adapt to go on remote server + send mail if config parsing error occurred
• get_npa_password -> everything !
  • Need to call cyberark to check if NPA pass should be changed
  • If expires soon, update it
  • Return the NPA password
• restart_module -> adapt to run on remote server
• send_mail -> adapt to correctly send the mail
• update_npa_file -> everything !
  • Need to get the .profile
  • parse it to match its values to the NPA
  • decode its values using the right jasypt encoding
  • compare it to those of the NPA
  • if there is a change between cyberark and .profile for any NPA
    • backup .profile on remote server
    • rewrite it with the correct new values