sap-hana-system-replication-hooks.yaml

---
- hosts: hana
  remote_user: cloudadmin
  become: true
  become_user: root

  pre_tasks:
    - name: Source hana install variables
      include_vars: ./vars/hana_vars.yaml

  vars:
    is_primary: "{{ ansible_play_hosts[0] == inventory_hostname }}"
    # All hook scripts should be used directly from the SAPHanaSR package.
    # If the scripts are moved or copied, regular SUSE package updates will not work.
    # https://documentation.suse.com/sbp/sap-15/html/SLES4SAP-hana-sr-guide-PerfOpt-15/index.html#cha.s4s.hana-hook
    __hooks_dir: "/usr/share/SAPHanaSR/"
    __sapcontrol: "/usr/sap/hostctrl/exe/sapcontrol"

  handlers:
    - name: Stop HANA
      ansible.builtin.command:  # Stopwait will timeout after 600 seconds.
        cmd: >-
          {{ __sapcontrol }}
          -nr {{ sap_hana_install_instance_number }}
          -function StopWait 600 10

    - name: Start HANA Primary
      ansible.builtin.command:  # StartWait will timeout after 600 seconds.
        cmd: >-
          {{ __sapcontrol }}
          -nr {{ sap_hana_install_instance_number }}
          -function StartWait 600 10
      when: is_primary

    - name: Start HANA Secondary
      ansible.builtin.command:  # StartWait will timeout after 600 seconds.
        cmd: >-
          {{ __sapcontrol }}
          -nr {{ sap_hana_install_instance_number }}
          -function StartWait 600 10
      when: not is_primary

  tasks:
    - name: Assert that required variables are defined
      ansible.builtin.assert:
        that: "{{ item }} is defined"
        fail_msg: >-
          The required variable '{{ item }}' is not defined. This variable must be
          defined when using this role.
        success_msg: >-
          The variable '{{ item }}' is defined.
      loop:
        - 'sap_hana_install_sid'
        - 'sap_hana_install_instance_number'

    - name: Ensure hooks directory exists
      ansible.builtin.file:
        path: "{{ __hooks_dir }}"
        owner: "{{ sap_hana_install_sid | lower }}adm"
        group: sapsys
        state: directory
        mode: '0775'

    - name: Ensure System Replication hooks are installed and configured
      notify:
        - Stop HANA
        - Start HANA Primary
        - Start HANA Secondary
      block:
        # https://documentation.suse.com/sbp/sap-15/html/SLES4SAP-hana-sr-guide-PerfOpt-15/index.html#id-implementing-saphanasr-hook-for-srconnectionchanged
        - name: Ensure ha_dr_provider_SAPHanaSR section exists in global.ini
          community.general.ini_file:
            path: /usr/sap/{{ sap_hana_install_sid }}/SYS/global/hdb/custom/config/global.ini
            section: "{{ item.section }}"
            option: "{{ item.key }}"
            value: "{{ item.value }}"
            mode: '0644'
            backup: true
          loop:
            - {'section': 'ha_dr_provider_SAPHanaSR', 'key': 'provider', 'value': 'SAPHanaSR'}
            - {'section': 'ha_dr_provider_SAPHanaSR', 'key': 'path', 'value': '{{ __hooks_dir }}'}
            - {'section': 'ha_dr_provider_SAPHanaSR', 'key': 'execution_order', 'value': '1'}
            - {'section': 'trace', 'key': 'ha_dr_saphanasr', 'value': 'info'}

        - name: Add hooks into sudoers (SAPHanaSR-ScaleUp entries for writing srHook cluster attribute)
          ansible.builtin.lineinfile:
            path: /etc/sudoers.d/HanaSystemReplication
            state: present
            regexp: "{{ item.regexp }}"
            line: "{{ item.line }}"
            validate: /usr/sbin/visudo -cf %s
            create: true
            mode: '0440'
          loop:
            - {'regexp': '^#ANSIBLE MANAGED DOCUMENT', 'line': '#ANSIBLE MANAGED DOCUMENT - no manual edits!'}
            - {'regexp': '^Cmnd_Alias SOK_SITEA', 'line': 'Cmnd_Alias SOK_SITEA = /usr/sbin/crm_attribute -n hana_{{ sap_hana_install_sid | lower }}_site_srHook_{{ primary_site }} -v SOK -t crm_config -s SAPHanaSR'}
            - {'regexp': '^Cmnd_Alias SFAIL_SITEA ', 'line': 'Cmnd_Alias SFAIL_SITEA = /usr/sbin/crm_attribute -n hana_{{ sap_hana_install_sid | lower }}_site_srHook_{{ primary_site }} -v SFAIL -t crm_config -s SAPHanaSR'}
            - {'regexp': '^Cmnd_Alias SOK_SITEB', 'line': 'Cmnd_Alias SOK_SITEB = /usr/sbin/crm_attribute -n hana_{{ sap_hana_install_sid | lower }}_site_srHook_{{ secondary_site }} -v SOK -t crm_config -s SAPHanaSR'}
            - {'regexp': '^Cmnd_Alias SFAIL_SITEB', 'line': 'Cmnd_Alias SFAIL_SITEB = /usr/sbin/crm_attribute -n hana_{{ sap_hana_install_sid | lower }}_site_srHook_{{ secondary_site }} -v SFAIL -t crm_config -s SAPHanaSR'}
            - {'regexp': '^Cmnd_Alias HOOK_HELPER', 'line': 'Cmnd_Alias HOOK_HELPER = /usr/sbin/SAPHanaSR-hookHelper --sid={{ sap_hana_install_sid | upper }} --case=checkTakeover'}
            - {'regexp': '^{{ sap_hana_install_sid | lower }}adm ALL=(ALL) NOPASSWD', 'line': '{{ sap_hana_install_sid | lower }}adm ALL=(ALL) NOPASSWD: SOK_SITEA, SFAIL_SITEA, SOK_SITEB, SFAIL_SITEB, HOOK_HELPER'}
          when: 0

        - name: Add hooks into sudoers (SAPHanaSR-ScaleUp entries for writing srHook cluster attribute and SAPHanaSR-hookHelper)
          ansible.builtin.lineinfile:
            path: /etc/sudoers.d/HanaSystemReplication
            state: present
            regexp: "{{ item.regexp }}"
            line: "{{ item.line }}"
            validate: /usr/sbin/visudo -cf %s
            create: true
            mode: '0440'
          loop:
            - {'regexp': '^{{ sap_hana_install_sid | lower }}adm ALL=(ALL) NOPASSWD', 'line': '{{ sap_hana_install_sid | lower }}adm ALL=(ALL) NOPASSWD: /usr/sbin/crm_attribute -n hana_{{ sap_hana_install_sid | lower }}_site_srHook_*'}
            - {'regexp': '^{{ sap_hana_install_sid | lower }}adm ALL=(ALL) NOPASSWD', 'line': '{{ sap_hana_install_sid | lower }}adm ALL=(ALL) NOPASSWD: /usr/sbin/SAPHanaSR-hookHelper *'}
          when: 1