/ansible-keepalived

Ansible role to set up keepalived in Debian-like systems

Primary LanguageDockerfileMIT LicenseMIT

keepalived

Build Status Ansible Galaxy

Set up the latest or a specific version of Keepalived in Debian-like systems.

Requirements

  • git (will be installed)
  • build-essential (will be installed)
  • automake (will be installed)
  • libtool (will be installed)
  • pkg-config (will be installed)
  • libssl-dev (will be installed)

Variables

  • keepalived_git_repo: [default: https://github.com/acassen/keepalived.git]: Keepalived git repo

  • keepalived_version: [default: v2.0.11]: Keepalived version to install

  • keepalived_install: [default: []]: Additional packages to install (e.g. ['libnl-3-dev', 'libnl-genl-3-dev', 'libnl-route-3-dev', 'libnfnetlink-dev'])

  • keepalived_configure_options: [default: []]: Options to pass to ./configure

  • keepalived_options: [default: []]: Options to pass to the keepalived

  • keepalived_options.{n}.name: [required]: Option name (e.g. log-facility)

  • keepalived_options.{n}.value: [optional]: Option value (e.g. 7)

  • keepalived_ip_nonlocal_bind: [default: 1]: Allow to bind to IP addresses that are nonlocal, meaning that they're not assigned to a device on the local system

  • keepalived_create_keepalived_script_user: [default: false]: Whether or not to create the keepalived_script user, see keepalived_global_defs_script_user

  • keepalived_global_defs_notification_email: [default: ['root@localhost.localdomain']]: Email addresses to send alerts to

  • keepalived_global_defs_notification_email_from: [default: 'root@localhost.localdomain']: From address that will be in header

  • keepalived_global_defs_smtp_server: [default: '127.0.0.1']: SMTP server IP address

  • keepalived_global_defs_smtp_connect_timeout: [default: 30]: SMTP server connect timeout in seconds

  • keepalived_global_defs_script_user: [optional]: Specify the default user / group to run scripts under. If group is not specified, the group of the user is used. If this option is not specified, the user defaults to keepalived_script. If that user exists, otherwise root (since 1.3.0, e.g. 'nobody nogroup', )

  • keepalived_global_defs_enable_script_security: [optional]: Don't run scripts configured to be run as root if any part of the path is writable by a non-root user (since 1.3.0, e.g. true)

  • keepalived_vrrp_script_map: [default: {}]: Script declarations

  • keepalived_vrrp_script_map.key: [required]: The identifier of the file (e.g. check-haproxy)

  • keepalived_vrrp_script_map.key.src: [required]: The local path of the file to copy, can be absolute or relative (e.g. ../../../files/keepalived/usr/local/bin/check-haproxy)

  • keepalived_vrrp_script_map.key.dest: [required]: The remote path of the file to copy (e.g. /usr/local/bin/check-haproxy)

  • keepalived_vrrp_script_map.key.owner: [optional, default root]: The name of the user that should own the file

  • keepalived_vrrp_script_map.key.group: [optional, default root]:The name of the group that should own the file

  • keepalived_vrrp_script_map.key.mode: [optional, default 0750]: The mode of the file

  • keepalived_vrrp_scripts: [default: {}]: VRRP script declarations

  • keepalived_vrrp_scripts.key: The name of the VRRP script

  • keepalived_vrrp_scripts.key.script: The script to run periodically

  • keepalived_vrrp_scripts.key.weight: [optional]: The check weight to adjust the priority

  • keepalived_vrrp_scripts.key.interval: [optional]: The check interval in seconds

  • keepalived_vrrp_scripts.key.timeout: [optional]: Seconds after which script is considered to have failed

  • keepalived_vrrp_scripts.key.rise: [optional]: Required number of successes for OK transition

  • keepalived_vrrp_scripts.key.fall: [optional]: Required number of successes for KO transition

  • keepalived_vrrp_instances: [default: {}]: VRRP instance declarations

  • keepalived_vrrp_instances.key: The name of the VRRP instance

  • keepalived_vrrp_instances.key.interface: Interface bound by VRRP

  • keepalived_vrrp_instances.key.state: Start-up default state (MASTER|BACKUP). As soon as the other machine(s) come up, an election will be held and the machine with the highest priority will become MASTER

  • keepalived_vrrp_instances.key.priority: For electing MASTER highest priority (0...255) wins

  • keepalived_vrrp_instances.key.virtual_router_id: Arbitrary unique number (0...255) used to differentiate multiple instances of VRRPD running on the same NIC (and hence same socket)

  • keepalived_vrrp_instances.key.advert_int: [optional]: The advert interval in seconds

  • keepalived_vrrp_instances.key.smtp_alert: [optional]: Whether or not to send email notifications during state transitioning-

  • keepalived_vrrp_instances.key.authentication: [optional]: Authentication block

  • keepalived_vrrp_instances.key.authentication.auth_type: Simple password or IPSEC AH (PASS|AH)

  • keepalived_vrrp_instances.key.authentication.auth_pass: Password string (up to 8 characters)

  • keepalived_vrrp_instances.key.virtual_ipaddresses: VRRP IP address block

  • keepalived_vrrp_instances.key.virtual_ipaddresses_excluded: IP address block, which is not included in the VRRP packet itself, in order to support more than 20 ips

  • keepalived_vrrp_instances.key.nopreempt: [optional]: VRRP will normally preempt a lower priority machine when a higher priority machine comes online. This option allows the lower priority machine to maintain the master role, even when a higher priority machine comes back online. NOTE: For this to work, the initial state of this entry must be BACKUP

  • keepalived_vrrp_instances.key.preempt_delay: [optional]: Seconds after startup until preemption (if not disabled by nopreempt). Range: 0 (default) to 1000 NOTE: For this to work, the initial state of this entry must be BACKUP

  • keepalived_vrrp_instances.key.track_scripts: Scripts state we monitor

  • keepalived_vrrp_instances.key.notify: [optional]: Scripts that is invoked when a server changes state

  • keepalived_vrrp_instances.key.notify_user: [optional]: Specify the user / group to run this script under (since 1.3.0, e.g. 'nobody nogroup')

  • keepalived_vrrp_instances.key.notify_backup: [optional]: Scripts that is invoked when a server changes state (to BACKUP)

  • keepalived_vrrp_instances.key.notify_backup_user: [optional]: Specify the user / group to run this script under (since 1.3.0)

  • keepalived_vrrp_instances.key.notify_fault: [optional]: Scripts that is invoked when a server changes state (to FAULT)

  • keepalived_vrrp_instances.key.notify_fault_user: [optional]: Specify the user / group to run this script under (since 1.3.0)

  • keepalived_vrrp_instances.key.notify_master: [optional]: Scripts that is invoked when a server changes state (to MASTER)

  • keepalived_vrrp_instances.key.notify_master_user: [optional]: Specify the user / group to run this script under (since 1.3.0)

  • keepalived_vrrp_instances.key.unicast_peer: [optional]: IP address of aired unicast address (if you don't want to use multicast)

Dependencies

None

Example (HAProxy)

---
- hosts: all
  roles:
    - keepalived
  vars:
    keepalived_options:
      - name: log-detail
    keepalived_vrrp_scripts:
      chk_haproxy:
        script: '/bin/pidof haproxy'
        weight: 2
        interval: 1

    keepalived_vrrp_instances:
      VI_1:
        interface: eth1
        state: MASTER
        priority: 101
        virtual_router_id: 51

        authentication:
          auth_type: PASS
          auth_pass: '4Apr3C*d'

        virtual_ipaddresses:
          - '10.0.0.10/24 dev eth1 label eth1:1'

        track_scripts:
          - chk_haproxy

License

MIT

Author Information

Mischa ter Smitten

Feedback, bug-reports, requests, ...

Are welcome!