• '0XXX" into XXX : correct permissions for Salt

• Change the name of the script in action (no more script .sh)
• '0644' (Ansible) into 644 (Salt)

Many changes:

• Improved script structure by separating configuration, helper functions, main function and application entry point.

carp-ovh logs were written both to /var/log/messages and /var/log/carp.log.
This change redirects them only to /var/log/carp.log by excluding them from /var/log/messages.

Minor changes to the script names in init.sls

Fix the path of the script : /usr/local/scripts/carp/carp-ovh.py

Fix the path of the parameter action : /usr/local/scripts/carp/carp-ovh-switch.sh

When router-003 (The MASTER) become unavailable :

Enable rotation of Vault AppRole credentials on CARP routers

Tested locally with ripgrep. Configuration files like .arcconfig are now correctly included in search results !

I tested the Docker image locally and the image builds, the container starts correctly, and the test suite runs inside it.

The script to test if we can access to the OVH credentials (application_key, application_secret, consumer_key):

The script to test the connection to Vault, using a YAML configuration file that tells the secretsmith client how to connect to Vault :

It is not necessary to create a local map.jinja here, since it only imports a variable from the global map.jinja.

1. Install pip using the OS-specific package prefix from map.jinja.