From 5c11472e9aefe49a604e3aee31353214f00065f8 Mon Sep 17 00:00:00 2001
From: Jeremy Dubois <jdubois@evolix.fr>
Date: Thu, 9 Jul 2020 15:44:25 +0200
Subject: [PATCH] Force replacement of some NRPE checks

We cannot simply put "force: true" because some
checks are customizable, some are not.
We do not force to replace customizable ones for
the customizations not to be lost.
---
 roles/nagios-nrpe/tasks/main.yml | 22 ++++++++++++++++------
 1 file changed, 16 insertions(+), 6 deletions(-)

diff --git a/roles/nagios-nrpe/tasks/main.yml b/roles/nagios-nrpe/tasks/main.yml
index 2b4abd0..eb19793 100644
--- a/roles/nagios-nrpe/tasks/main.yml
+++ b/roles/nagios-nrpe/tasks/main.yml
@@ -32,23 +32,33 @@
 
 - name: Nagios plugins are installed
   copy:
-    src: plugins_bsd/
-    dest: /usr/local/libexec/nagios/plugins/
+    src: plugins_bsd/{{ item.name }}
+    dest: /usr/local/libexec/nagios/plugins/{{ item.name }}
     owner: root
     group: wheel
     mode: "0755"
+    force: "{{ item.force }}"
+  with_items:
+    - { name: 'check_carp_if', force: true }
+    - { name: 'check_connections_state.sh', force: false }
+    - { name: 'check_ipsecctl.sh', force: false }
+    - { name: 'check_openbgpd', force: true }
+    - { name: 'check_openvpn', force: false }
+    - { name: 'check_openvpn.pl', force: true }
+    - { name: 'check_ospfd_simple', force: true }
   notify: restart nrpe
 
 - name: Nagios plugins are installed - template
   template:
-    src: plugins_bsd/{{ item }}.j2
-    dest: /usr/local/libexec/nagios/plugins/{{ item }}
+    src: plugins_bsd/{{ item.name }}.j2
+    dest: /usr/local/libexec/nagios/plugins/{{ item.name }}
     owner: root
     group: wheel
     mode: "0755"
+    force: "{{ item.force }}"
   with_items:
-    - 'check_pf_states'
-    - 'check_free_mem.sh'
+    - { name: 'check_pf_states', force: false }
+    - { name: 'check_free_mem.sh', force: true }
   notify: restart nrpe
 
 - name: Starting and enabling nrpe