(PE-39411) Validate RBAC token on upgrade if required for compiler upgrades

Author: jhbuchanan45

plans/upgrade.pp

@@ -67,6 +67,8 @@
       'upgrade-replica-compilers',
   'finalize']] $begin_at_step = undef,
 ) {
+  out::message('# Validating inputs')
+
   # Ensure input valid for a supported architecture
   $arch = peadm::assert_supported_architecture(
     $primary_host,
@@ -97,6 +99,11 @@
       $replica_postgresql_target,
   ])
 
+  # Validate the RBAC token used to upgrade compilers if compilers are present
+  if $compiler_targets and $compiler_targets.size > 0 {
+    run_task('peadm::validate_rbac_token', $primary_target, token_file => $token_file)
+  }
+
   out::message('# Gathering information')
 
   # lint:ignore:strict_indent

tasks/validate_rbac_token.rb

@@ -29,7 +29,7 @@ def execute!
       body = JSON.parse(resp.body)
       case resp.code
       when '401', '403'
-        puts "#{resp.code} #{body['kind']}: Check your API token at #{token_file}. " +
+        puts "#{resp.code} #{body['kind']}: \nCheck your API token at #{token_file}. " +
               "An alternate token file can be specified using the token_file param. \n\n" +
               "See https://www.puppet.com/docs/pe/latest/rbac_token_auth_intro for more details. \n"
       else