Add API Check Forwarder feature

Author: Donien

roles/ifw/README.md

@@ -119,6 +119,12 @@ Table of contents:
   Whether to use the Icinga for Windows service user 'icinga' when `ifw_jea_install=true`.  
   Default: `true`
 
+- `ifw_api_feature: boolean`  
+  Whether to enable the Icinga for Windows API Check Forwarder.  
+  [Read more about the Icinga for Windows API Check Forwarder](https://icinga.com/docs/icinga-for-windows/latest/doc/110-Installation/30-API-Check-Forwarder/).  
+  Default: `true`
+
+
 ### Getting a Certificate
 
 If neither `ifw_icinga2_ca_host` nor `ifw_icinga2_ticket` is specified, your target host will connect to the first parent in `ifw_icinga2_parents` and file a CSR. This needs to be signed manually afterwards.

roles/ifw/defaults/main.yml

@@ -23,3 +23,5 @@ ifw_icinga2_global_zones: []
 
 ifw_jea_install: true
 ifw_jea_managed_user: true
+
+ifw_api_feature: true

roles/ifw/meta/argument_specs.yml

@@ -180,3 +180,10 @@ argument_specs:
         type: bool
         required: false
         default: true
+      ifw_api_feature:
+        description:
+          - Whether to enable the Icinga for Windows API Check Forwarder.
+            L(Read more about the Icinga for Windows API Check Forwarder, https://icinga.com/docs/icinga-for-windows/latest/doc/110-Installation/30-API-Check-Forwarder/).
+        type: bool
+        required: false
+        default: true

roles/ifw/tasks/configure_icinga2.yml

@@ -108,6 +108,7 @@
     _current_parents0: "{{ _framework_config_live['IfW-ParentAddress:' + ifw_icinga2_parents[0].cn]['Values'][0] | default(none) }}"
     _current_parents1: "{{ (_framework_config_live['IfW-ParentAddress:' + ifw_icinga2_parents[1].cn]['Values'][0] if ifw_icinga2_parents | length > 1 else none) | default(none) }}" # noqa: yaml[line-length]
     _current_jea: "{{ _framework_config_live['IfW-InstallJEAProfile']['Selection'] }}"
+    _current_api_feature: "{{ _framework_config_live['IfW-InstallApiChecks']['Selection'] }}"
 
 - name: Check whether requested and existing configuration is identical
   failed_when: false
@@ -129,6 +130,8 @@
       - (_current_jea == "0" if (ifw_jea_install and not ifw_jea_managed_user) else true)
       - (_current_jea == "1" if (ifw_jea_install and ifw_jea_managed_user) else true)
       - (_current_jea == "2" if not ifw_jea_install else true)
+      - (_current_api_feature == "0" if not ifw_api_feature else true)
+      - (_current_api_feature == "1" if ifw_api_feature else true)
     fail_msg: "Configuration needs an update"
     success_msg: "Configuration needs no update"
   register: _assertion_result

roles/ifw/templates/windows/icinga_install_command.j2

@@ -107,5 +107,14 @@
     {# 2 Do not install JEA Profile #}
     "Selection": "2"
     {% endif %}
+  },
+  "IfW-InstallApiChecks": {
+    {% if ifw_api_feature %}
+    {# 1 -> Install Api-Checks feature #}
+    "Selection": "1"
+    {% else %}
+    {# 0 -> Do not install Api-Checks feature #}
+    "Selection": "0"
+    {% endif %}
   }
 }