From a30bbddbf5e8b2556caa97449eeb49d82fcaa6be Mon Sep 17 00:00:00 2001
From: Vezpi <etienne.girault@gmail.com>
Date: Fri, 19 Jun 2026 12:51:08 +0000
Subject: [PATCH] add: firmware update trigger

---
 .../opnsense/update_opnsense_ha_cluster.yml   | 49 +++++++++----------
 1 file changed, 22 insertions(+), 27 deletions(-)

diff --git a/ansible/opnsense/update_opnsense_ha_cluster.yml b/ansible/opnsense/update_opnsense_ha_cluster.yml
index a8b5635..d41c47f 100644
--- a/ansible/opnsense/update_opnsense_ha_cluster.yml
+++ b/ansible/opnsense/update_opnsense_ha_cluster.yml
@@ -132,32 +132,27 @@
           register: _enable_maintenance
           changed_when: _enable_maintenance.status == "ok"
 
-        - debug:
-            var: _enable_maintenance
+        - name: Trigger firmware update
+          ansible.builtin.uri:
+            url: "https://{{ opnsense_host }}/api/core/firmware/update"
+            method: POST
+            user: "{{ opnsense_api_key }}"
+            password: "{{ opnsense_api_secret }}"
+            force_basic_auth: true
+            validate_certs: false
 
-#     - name: Trigger firmware update
-#       ansible.builtin.uri:
-#         url: "https://{{ opnsense_host }}/api/core/firmware/update"
-#         method: POST
-#         user: "{{ opnsense_api_key }}"
-#         password: "{{ opnsense_api_secret }}"
-#         force_basic_auth: true
-#         validate_certs: false
-#         body_format: json
-#         body: {}
-
-#     - name: Wait for packages to install
-#       ansible.builtin.uri:
-#         url: "https://{{ opnsense_host }}/api/core/firmware/running"
-#         method: GET
-#         user: "{{ opnsense_api_key }}"
-#         password: "{{ opnsense_api_secret }}"
-#         force_basic_auth: true
-#         validate_certs: false
-#       register: _running
-#       until: _running.json.status != 'running'
-#       retries: 30
-#       delay: 15
+        - name: Wait for packages to update
+          ansible.builtin.uri:
+            url: "https://{{ opnsense_host }}/api/core/firmware/running"
+            method: GET
+            user: "{{ opnsense_api_key }}"
+            password: "{{ opnsense_api_secret }}"
+            force_basic_auth: true
+            validate_certs: false
+          register: _update_running
+          until: _update_running.json.status != 'running'
+          retries: 300
+          delay: 15
 
 #     # Reboot is a separate explicit step — update does NOT auto-reboot
 #     - name: Reboot node
@@ -330,8 +325,8 @@
 #             password: "{{ opnsense_api_secret }}"
 #             force_basic_auth: true
 #             validate_certs: false
-#           register: _running
-#           until: _running.json.status != 'running'
+#           register: _update_running
+#           until: _update_running.json.status != 'running'
 #           retries: 30
 #           delay: 15