uZer.keepalived

ansible-role-keepalived

此角色从apt/yum仓库安装keepalived。可以设置多个服务检查和多个VIP。

所有变量应在host_vars或group_vars中配置。

依赖

应适用于Centos、Redhat、Ubuntu、Debian。

详细使用示例

主机变量（应在host_vars/...中定义）：

keepalived_role:
  "VI_1": "MASTER"              # 可以是MASTER或SLAVE
  "VI_2": "MASTER"
  "VI_3": "SLAVE"

组变量（应在每个keepalived pod的group_vars/...中定义）：

keepalived_vrrp_instances:
  "VI_1":
    virtual_router_id: 51       # 将作为接口标签使用
    master_priority: 100         # 优先级。越大越高
    slave_priority: 50
    shared_iface: eth0
    shared_vips:
      - '10.127.50.3'
    auth_pass: "{{ vault_vrrp_passwords["VI_1"] }}"

  "VI_2":
    virtual_router_id: 52
    master_priority: 100
    slave_priority: 50
    shared_iface: eth0
    shared_vips:
      - '10.127.50.4'
    auth_pass: "{{ vault_vrrp_passwords["VI_2"] }}"

  "VI_3":
    virtual_router_id: 53
    master_priority: 100
    slave_priority: 50
    shared_iface: eth0
    shared_vips:
      - '10.127.50.5'
    auth_pass: "{{ vault_vrrp_passwords["VI_3"] }}"
    checks:
      - chk_nginx
      - chk_keepalived
    settings:
      garp_master_refresh: 20

keepalived_checks:
  "chk_nginx":
    process: nginx              # 使用`killall -0`监控NGINX
    period: 2                   # 每2秒
  "chk_keepalived":
    script: pgrep keepalived    # 监控Keepalived
    period: 2                   # 每2秒

# 在vault中：
vault_keepalived_vrrp_passwords:
    "VI_1": 'YUiszRrpLEXbnMLqDapwWLvPAJ'
    "VI_2": 'rJEUkQnmSRahwRTpjUkFVid'
    "VI_3": 'itkcbxmaXwFBiUZJhePmtX'

# 可选通知和调整
keepalived_advert_interval: 1
keepalived_notify_from: "keepalived@{{ ansible_fqdn }}"
keepalived_notify_smtp_server: "smtp.example.com"
keepalived_notify_smtp_timeout: "30"
keepalived_notify_list:
  - "[email protected]"
  - "[email protected]"
keepalived_global_defs:
  vrrp_garp_master_refresh: 60

最小使用示例

至少应定义以下变量：

# 每个主机
keepalived_role:
  "VI_1": "MASTER"

# 每个组
keepalived_vrrp_instances:
  "VI_1":
    virtual_router_id: 10
    shared_iface: eth0
    shared_vips:
      - '10.127.50.5'
    auth_pass: 'NLxQZYzXUfhjkJqWzVrPMua'