Merge branch 'main' of github.com:stdevel/ansible-sentinelone_client

Author: stdevel

README.md

@@ -2,17 +2,20 @@
 
 Installs and registers the SentinelOne Endpoint agent.
 
+This role is **deprecated** and was replaced with [`sva.sentinelone.sentinelone_client_legacy`](https://galaxy.ansible.com/ui/repo/published/sva/sentinelone/content/role/sentinelone_client_legacy/) and - even better - [`sva.sentinelone.install_agent`](https://galaxy.ansible.com/ui/repo/published/sva/sentinelone/content/role/install_agent/).
+
 ## Requirements
 
 No requirements.
 
 ## Role Variables
 
-| Variable | Default | Description |
-| -------- | ------- | ----------- |
-| `sentinelone_client_filename` | *(empty)* | Package file to install |
-| `sentinelone_client_token` | *(empty)* | Group/Site token |
-| `sentinelone_client_gpgkey` | *(empty)* | GPG signing key to import |
+| Variable                             | Default   | Description                      |
+| ------------------------------------ | --------- | -------------------------------- |
+| `sentinelone_client_filename`        | *(empty)* | Package file to install          |
+| `sentinelone_client_token`           | *(empty)* | Group/Site token                 |
+| `sentinelone_client_gpgkey`          | *(empty)* | GPG signing key to import        |
+| `sentinelone_client_force_new_token` | `false`   | Set to true to force a new token |
 
 ## Dependencies
 

defaults/main.yml

@@ -1,3 +1,6 @@
 ---
 sentinelone_client_token: ''
 sentinelone_client_gpgkey: ''
+sentinelone_client_force_new_token: false
+sentinelone_client_customer_id: ''
+zypper_disable_gpg_check: 'false'

tasks/install_suse.yml

@@ -23,5 +23,6 @@
 - name: Install package
   community.general.zypper:
     name: "/tmp/{{ sentinelone_client_filename | basename }}"
+    disable_gpg_check: {{ zypper_disable_gpg_check }}
   become: true
   when: sentinelone_client_digest is not defined

tasks/main.yml

@@ -18,7 +18,7 @@
   ansible.builtin.get_url:
     url: "{{ sentinelone_client_filename }}"
     dest: "/tmp/{{ sentinelone_client_filename | basename }}"
-    mode: 0644
+    mode: '0644'
   when: "'http' in sentinelone_client_filename"
 
 - name: Copy installation package
@@ -36,6 +36,16 @@
     path: "/tmp/{{ sentinelone_client_filename | basename }}"
     state: absent
 
+- name: Check if we need to force a new token
+  ansible.builtin.file:
+    path: /opt/sentinelone/.INITIALIZATION_COMPLETE
+    state: absent
+  become: true
+  when:
+    - sentinelone_client_force_new_token
+    - sentinelone_client_token is defined
+    - sentinelone_client_token | length > 0
+
 - name: Set Group/Site token
   ansible.builtin.command: "/opt/sentinelone/bin/sentinelctl management token set {{ sentinelone_client_token }}"
   args:
@@ -44,6 +54,13 @@
   notify: Create initialization file
   when: sentinelone_client_token is defined and sentinelone_client_token != ''
 
+- name: Set SentinelOne customer_id
+  ansible.builtin.command: "/opt/sentinelone/bin/sentinelctl management customer_id set {{ sentinelone_client_customer_id }}"
+  register: customer_id_output
+  changed_when: "'customer id successfully set' in customer_id_output.stdout|lower"
+  become: true
+  when: sentinelone_client_customer_id | length > 0
+
 - name: Start agent
   ansible.builtin.command: /opt/sentinelone/bin/sentinelctl control start
   register: start_output