From 313891cc2914bb951267930f624f08104fce6310 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tam=C3=A1s=20G=C3=A9rczei?= <tamas@gerczei.eu>
Date: Thu, 15 Jul 2021 19:14:26 +0300
Subject: [PATCH] optional support for invoking the wrapped script with
 privilege escalation via sudo

---
 ipahealthcheck_exporter.go | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/ipahealthcheck_exporter.go b/ipahealthcheck_exporter.go
index 744af73..59dbc35 100644
--- a/ipahealthcheck_exporter.go
+++ b/ipahealthcheck_exporter.go
@@ -22,6 +22,7 @@ var (
 	ipahealthcheckPath    string
 	ipahealthcheckLogPath string
 	port                  int
+	sudo                  bool
 
 	ipahealthcheckServiceStateDesc = prometheus.NewDesc(
 		"ipa_service_state",
@@ -81,6 +82,7 @@ func init() {
 	flag.StringVar(&ipahealthcheckPath, "ipahealthcheck-path", "/usr/bin/ipa-healthcheck", "Path to the ipa-healthcheck binary.")
 	flag.StringVar(&ipahealthcheckLogPath, "ipahealthcheck-log-path", "/var/log/ipa/healthcheck/healthcheck.log", "Path to the ipa-healthcheck log file.")
 	flag.IntVar(&port, "port", 9888, "Port on which to expose metrics.")
+	flag.BoolVar(&sudo, "sudo", false, "Use privilege escalation to run the health checks")
 }
 
 func (ic ipahealthcheckCollector) Describe(ch chan<- *prometheus.Desc) {
@@ -99,7 +101,12 @@ func (ic ipahealthcheckCollector) Collect(ch chan<- prometheus.Metric) {
 		log.Fatal("Cannot write ipa-healthcheck output for parsing: ", err)
 	}
 
-	cmd := exec.Command(ic.ipahealthcheckPath, "--source", "ipahealthcheck.meta.services", "--output-file", tmpFile.Name())
+	healthCheckCmd := []string{ic.ipahealthcheckPath, "--source", "ipahealthcheck.meta.services", "--output-file", tmpFile.Name()}
+	if sudo {
+		healthCheckCmd = append([]string{"sudo"}, healthCheckCmd...)
+		log.Info("using sudo to execute health check")
+		}
+	cmd := exec.Command(healthCheckCmd[0], healthCheckCmd[1:]...)
 	cmd.Stderr = os.Stderr
 	err = cmd.Run()
 	if err != nil {