feat: Create role

README.md

@@ -52,6 +52,19 @@ Adresse IPv6 de failover.
 
 *<span style="text-decoration: underline">Valeur par défaut:</span> aucune*
 
+### keepalived_peers
+
+Passer en unicast en utilisant cette liste d'IP.
+
+*<span style="text-decoration: underline">Valeur par défaut:</span> aucune*
+
+### keepalived_notify_script_enabled
+
+Booléen permettant d'activer le script de notification.<br>
+Le script est déployé dans `/etc/keepalived/notify.sh`.
+
+*<span style="text-decoration: underline">Valeur par défaut:</span> `false`*
+
 ### keepalived_track_scripts
 
 Liste de script dont le code retour doit être à zéro pour que le membre conserve ou puisse prendre l'IP de failover.

defaults/main.yml

@@ -11,15 +11,24 @@ keepalived_mail_from: ""
 keepalived_ipv4: ""
 keepalived_ipv6: ""
 
+keepalived_peers: []
+
+keepalived_notify_enable: false
+keepalived_notify_pre: {}
+keepalived_notify_is_master: {}
+keepalived_notify_is_backup: {}
+keepalived_notify_is_fault: {}
+keepalived_notify_by_default: {}
+
 keepalived_track_scripts: []
-# Exemple:
+# Example:
 #  - name: check_haproxy_8080
 #    command: /usr/bin/nc -zv 127.0.0.1 8080
 #  - name: check_haproxy_8081
 #    command: /usr/bin/nc -zv 127.0.0.1 8081
 
 keepalived_track_processes: []
-# Exemple:
+# Example:
 #  - name: check_haproxy
 #    search: /usr/sbin/haproxy
 #    quorum: 2

handlers/main.yml

@@ -1,7 +1,7 @@
 ---
 # handlers file for keepalived
 
-- name: Redémarrer keepalived.service
+- name: Restart keepalived.service
   become: true
   ansible.builtin.systemd:
     state: restarted

meta/main.yml

@@ -1,7 +1,7 @@
 galaxy_info:
   namespace: ykn
   author: pulsar89.5
-  description: Rôle de déploiement de keepalived
+  description: Deploy keepalived
 
   license: GPL-3.0-or-later
 
@@ -14,10 +14,3 @@ galaxy_info:
 
 dependencies:
   - role: users
-    vars:
-      users_role_keepalived:
-        - name: keepalived_script
-          comment: "Dedicated user for keepalived script"
-          update_password: on_create
-          password_lock: true
-          shell: /bin/bash

tasks/configuration.yml

@@ -0,0 +1,37 @@
+---
+# tasks file for keepalived
+
+- name: Deploy configuration
+  ansible.builtin.template:
+    src: keepalived.j2
+    dest: /etc/keepalived/keepalived.conf
+    owner: root
+    group: root
+    mode: u=rw,g=r,o=r
+  become: true
+  notify: Restart keepalived.service
+
+- name: Deploy sudoers configuration
+  ansible.builtin.template:
+    src: sudoers.j2
+    dest: /etc/sudoers.d/keepalived_script
+    owner: root
+    group: keepalived_script
+    mode: u=rwx,g=rx,o=
+    validate: /usr/sbin/visudo -cf %s
+  when:
+    - keepalived_notify_enable
+    - keepalived_sudoers_cmd | length > 0
+  become: true
+  notify: Restart keepalived.service
+
+- name: Deploy notify script
+  ansible.builtin.template:
+    src: notify.bash.j2
+    dest: /etc/keepalived/notify.bash
+    owner: root
+    group: keepalived_script
+    mode: u=rwx,g=rx,o=
+  when: keepalived_notify_enable
+  become: true
+  notify: Restart keepalived.service

tasks/installation.yml

@@ -0,0 +1,7 @@
+---
+# tasks file for keepalived
+
+- name: Install keepalived
+  ansible.builtin.apt:
+    name: keepalived
+  become: true

tasks/main.yml

@@ -1,17 +1,10 @@
 ---
 # tasks file for keepalived
 
-- name: Installer keepalived
+- name: Import installation tasks
-  ansible.builtin.apt:
+  ansible.builtin.import_tasks:
-    name: keepalived
+    file: installation.yml
-  become: true
 
-- name: Déployer la configuration
+- name: Import configuration tasks
-  ansible.builtin.template:
+  ansible.builtin.import_tasks:
-    owner: root
+    file: configuration.yml
-    group: root
-    mode: u=rw,g=r,o=r
-    src: keepalived.j2
-    dest: /etc/keepalived/keepalived.conf
-  become: true
-  notify: Redémarrer keepalived.service

templates/keepalived.j2

@@ -13,6 +13,7 @@ global_defs {
     smtp_connect_timeout 30
 {% endif %}
 
+  script_user keepalived_script
   enable_script_security
   max_auto_priority 50
 }
@@ -40,6 +41,17 @@ vrrp_instance VIP_{{ keepalived_uid }} {
   virtual_router_id {{ keepalived_uid }}
   advert_int 1
 
+{% if keepalived_peers | length > 0 %}
+  unicast_src_ip {{ ansible_facts[keepalived_interface]['ipv4']['address'] }}
+  unicast_peer {
+{% for peer in keepalived_peers %}
+{% if peer != ansible_facts[keepalived_interface]['ipv4']['address'] %}
+    {{ peer }}
+{% endif %}
+{% endfor %}
+  }
+{% endif %}
+
 {% if keepalived_ipv4 | length > 0 %}
   virtual_ipaddress {
     {{ keepalived_ipv4 }} dev {{ keepalived_interface }} scope global
@@ -52,6 +64,10 @@ vrrp_instance VIP_{{ keepalived_uid }} {
   }
 {% endif %}
 
+{% if keepalived_notify_enable %}
+  notify /etc/keepalived/notify.bash
+{% endif %}
+
 {% if keepalived_track_scripts | length > 0 %}
   track_script {
 {% for script in keepalived_track_scripts %}

templates/notify.bash.j2

@@ -0,0 +1,38 @@
+#!/bin/bash
+# {{ ansible_managed }}
+
+TYPE=$1
+NAME=$2
+STATE=$3
+
+{% if keepalived_notify_pre | length > 0 %}
+{{ keepalived_notify_pre }}
+{% endif %}
+
+# Use keepalived state
+case $STATE in
+{% if keepalived_notify_is_master | length > 0 %}
+  "MASTER")
+    {{ keepalived_notify_is_master | indent(4) }}
+    exit 0
+  ;;
+{% endif %}
+{% if keepalived_notify_is_backup | length > 0 %}
+  "BACKUP")
+    {{ keepalived_notify_is_backup | indent(4) }}
+    exit 0
+  ;;
+{% endif %}
+{% if keepalived_notify_is_fault | length > 0 %}
+  "FAULT")
+    {{ keepalived_notify_is_fault | indent(4) }}
+    exit 0
+  ;;
+{% endif %}
+{% if keepalived_notify_by_default | length > 0 %}
+  *)
+    {{ keepalived_notify_by_default | indent(4) }}
+    exit 1
+  ;;
+{% endif %}
+esac

templates/sudoers.j2

@@ -0,0 +1,5 @@
+# {{ ansible_managed }}
+
+{% for cmd in keepalived_sudoers_cmd %}
+keepalived_script ALL=(ALL) NOPASSWD:{{ cmd }}
+{% endfor %}

vars/main.yml

@@ -0,0 +1,9 @@
+---
+# vars file for keepalived
+
+users:
+  - name: keepalived_script
+    comment: "Dedicated user for keepalived script"
+    update_password: on_create
+    password_lock: true
+    shell: /bin/bash