Добавить playbook1_keepalived.yml

playbook1_keepalived.yml

@@ -0,0 +1,100 @@
+---
+- name: Configure Keepalived for HA Proxy
+  hosts: proxy
+  become: true
+  vars:
+    vip_address: "172.16.1.253"
+    vip_cidr: "23"
+    vrrp_instance: "VI_1"
+    vrrp_id: 51
+    auth_pass: "ansible_secure_pass"
+    check_script: "/usr/local/bin/check_haproxy.sh"
+    master_priority: 150
+    backup_priority: 100
+
+  tasks:
+    - name: Install keepalived package
+      ansible.builtin.apt:
+        name: keepalived
+        state: present
+        update_cache: true
+      tags: keepalived
+
+    - name: Create check_haproxy script directory
+      ansible.builtin.file:
+        path: /usr/local/bin
+        state: directory
+        mode: '0755'
+      tags: keepalived
+
+    - name: Deploy HAProxy health check script
+      ansible.builtin.copy:
+        content: |
+          #!/bin/bash
+          # Check if haproxy is running and listening
+          if pgrep -x "haproxy" > /dev/null; then
+            if ss -tlnp | grep -q ":80 "; then
+              exit 0
+            fi
+          fi
+          exit 1
+        dest: "{{ check_script }}"
+        mode: '0755'
+        owner: root
+        group: root
+      tags: keepalived
+
+    - name: Configure keepalived.conf
+      ansible.builtin.template:
+        content: |
+          global_defs {
+            router_id {{ inventory_hostname }}
+            script_user root
+            enable_script_security
+          }
+
+          vrrp_script check_haproxy {
+            script "{{ check_script }}"
+            interval 2
+            weight -20
+            fall 3
+            rise 2
+          }
+
+          vrrp_instance {{ vrrp_instance }} {
+            state {% if inventory_hostname == 'ha1-cod' %}MASTER{% else %}BACKUP{% endif %}
+            interface eth0
+            virtual_router_id {{ vrrp_id }}
+            priority {% if inventory_hostname == 'ha1-cod' %}{{ master_priority }}{% else %}{{ backup_priority }}{% endif %}
+            advert_int 1
+            authentication {
+              auth_type PASS
+              auth_pass {{ auth_pass }}
+            }
+            track_script {
+              check_haproxy
+            }
+            virtual_ipaddress {
+              {{ vip_address }}/{{ vip_cidr }} dev eth0
+            }
+          }
+        dest: /etc/keepalived/keepalived.conf
+        mode: '0644'
+        backup: true
+      notify: Restart keepalived
+      tags: keepalived
+
+    - name: Enable and start keepalived service
+      ansible.builtin.systemd:
+        name: keepalived
+        enabled: true
+        state: started
+        daemon_reload: true
+      tags: keepalived
+
+  handlers:
+    - name: Restart keepalived
+      ansible.builtin.systemd:
+        name: keepalived
+        state: restarted
+        daemon_reload: true