ansible实现自动部署haproxy+httpd+keepalived

左手的ㄟ右手 2021-10-19 19:22 361阅读 0赞

## 实验环境： ##

<table> 
 <thead> 
  <tr> 
   <th>server1</th> 
   <th>keepalived、haproxy</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>server2</td> 
   <td>apache</td> 
  </tr> 
  <tr> 
   <td>server3</td> 
   <td>apache</td> 
  </tr> 
  <tr> 
   <td>server4</td> 
   <td>keepalived、haproxy</td> 
  </tr> 
 </tbody> 
</table>

## 创建roles，并编辑apache安装文件 ##

galaxy介绍：

> Ansible Galaxy 是一个免费共享和下载 Ansible 角色的网站，可以帮助我们更好的定义和学习roles。  
> ansible-galaxy命令默认与https://galaxy.ansible.com网站API通信，可以查找、下载各种社区开发的  
> Ansible 角色。 ansible-galaxy在 Ansible 1.4.2 就已经被包含了。

1.创建apache模板（此功能要联网）

[devlops@server1 ansible]$ mkdir roles			##创建roles
    [devlops@server1 ansible]$ ls
    ansible.cfg  files     inventory       playbook.yml  templates
    file.retry   file.yml  playbook.retry  roles
    [devlops@server1 ansible]$ vim ansible.cfg 
    [devlops@server1 ansible]$ cd roles/
    [devlops@server1 roles]$ ls
    [devlops@server1 roles]$ ansible-galaxy init apache				##初始化apache
    - apache was created successfully
    [devlops@server1 roles]$ ls
    apache
    [devlops@server1 roles]$ cd apache/
    [devlops@server1 apache]$ ls
    defaults  files  handlers  meta  README.md  tasks  templates  tests  vars
    [devlops@server1 apache]$ rm -fr README.md
    [devlops@server1 apache]$ rm -fr tests/

2.编辑任务文件

[devlops@server1 apache]$ ls
    defaults  files  handlers  meta  tasks  templates  vars
    [devlops@server1 apache]$ cd tasks/
    [devlops@server1 tasks]$ ls
    main.yml
    [devlops@server1 tasks]$ \vi main.yml
    [devlops@server1 apache]$ cat tasks/main.yml

文件内容如下：

---
    - name: install httpd
      yum:
        name: httpd
        state: present
    
    - name: copy index.html
      copy:
        content: "{
       { ansible_facts['hostname'] }}"
        dest: /var/www/html/index.html
    
    - name: configure httpd
      template:
        src: httpd.conf.j2
        dest: /etc/httpd/conf/httpd.conf
        owner: root
        group: root
        mode: 644
      notify: restart httpd
    - name: start  httpd and firewalld
      service:
        name: "{
       { item }}"
        state: started
      loop:
        - httpd
        - firewalld
    
    - name: configure firewalld
      firewalld:
        service: http
        permanent: yes
        immediate: yes
        state: enabled

3.编辑触发器文件

[devlops@server1 apache]$ cat handlers/main.yml 
    
    ---
    - name: restart httpd
      service:
        name: httpd
        state: restarted

4.编辑变量文件

[devlops@server1 apache]$ cat vars/main.yml 
    
    ---
    http_host: "{
       { ansible_facts['defaults_ipv4']['adress'] }}"
    http_port: 80

5.添加http配置文件到模板中

[devlops@server1 apache]$ cd templates/
    [devlops@server1 templates]$ ls
    [devlops@server1 templates]$ scp ../../../templates/httpd.conf.j2 .

## 编写haproxy安装文件 ##

1.添加haproxy模板

[devlops@server1 roles]$ ls
    apache
    [devlops@server1 roles]$ ansible-galaxy init haproxy
    - haproxy was created successfully
    [devlops@server1 roles]$ ls
    apache  haproxy
    [devlops@server1 roles]$ cd haproxy/
    [devlops@server1 haproxy]$ ls
    defaults  files  handlers  meta  README.md  tasks  templates  tests  vars
    [devlops@server1 haproxy]$ rm -fr README.md 
    [devlops@server1 haproxy]$ rm -fr tests/
    [devlops@server1 haproxy]$

2.编辑任务文件

[devlops@server1 haproxy]$ cat tasks/main.yml 
    ---
    - name: install haproxy
      yum:
        name: haproxy
        state: present
    
    - name: configure haproxy
      template:
        src: templates/haproxy.cfg.j2
        dest: /etc/haproxy/haproxy.cfg
      notify: restart haproxy
    
    - name: start haproxy
      service:
        name: haproxy
        state: started

3.编辑触发器文件

[devlops@server1 haproxy]$ cat handlers/main.yml 
    ---
    - name: restart haproxy
      service:
        name: haproxy
        state: restarted

4.添加haproxy配置文件到模板目录中，并修改

[devlops@server1 haproxy]$ cd templates/
    [devlops@server1 templates]$ ls
    haproxy.cfg.j2
    [devlops@server1 haproxy]$ cd templates/
    [devlops@server1 templates]$ ls
    haproxy.cfg.j2

![在这里插入图片描述][20190811114636574.png]

[devlops@server1 ansible]$ vim apache.yml 
    
    - hosts: all
      tasks:
        - import_role:
            name: apache
          when: ansible_hostname in groups['webserver']
        - import_role:
            name: haproxy
          when: ansible_hostname in groups['lb']

## 编写keepalived安装文件 ##

1.创建keepalived模板

[devlops@server1 roles]$ ansible-galaxy init keepalived
    - keepalived was created successfully
    [devlops@server1 roles]$ ls
    apache  haproxy  keepalived
    [devlops@server1 roles]$ cd keepalived/
    [devlops@server1 keepalived]$ ls
    defaults  files  handlers  meta  README.md  tasks  templates  tests  vars
    [devlops@server1 keepalived]$ rm -fr README.md 
    [devlops@server1 keepalived]$ rm -fr tests/
    [devlops@server1 keepalived]$ ls
    defaults  files  handlers  meta  tasks  templates  vars

2.编写任务文件

[devlops@server1 keepalived]$ vim tasks/main.yml 
    
    ---
    - name: install keepalived
      yum:
        name: keepalived
        state: present
    
    - name: configure keepalived
      template:
        src: keepalived.conf.j2
        dest: /etc/keepalived/keepalived.conf
      notify: restart keepalived
    
    - name: start keepalived
      service:
        name: keepalived
        state: started

3.编辑触发器文件

[devlops@server1 keepalived]$ vim handlers/main.yml 
    ---
    - name: restart keepalived
      service:
        name: keepalived
        state: restarted

4.获取keepalived配置文件

[devlops@server1 keepalived]$ cd templates/
    [devlops@server1 templates]$ ls
    [devlops@server1 templates]$ cp /etc/keepalived/keepalived.conf .
    [devlops@server1 templates]$ vim keepalived.conf
    [devlops@server1 templates]$ mv keepalived.conf keepalived.conf.j2

文件内容：

[root@server1 templates]# cat keepalived.conf.j2 
    ! Configuration File for keepalived
    
    global_defs {
       notification_email {
         root@localhost
       }
       notification_email_from keepalived@localhost
       smtp_server 127.0.0.1
       smtp_connect_timeout 30
       router_id LVS_DEVEL
    }
    
    vrrp_instance VI_1 {
        state {
       { STATE }}
        interface eth0
        virtual_router_id {
       { VRID }}
        priority {
       { PRIORITY}}
        advert_int 1
        authentication {
            auth_type PASS
            auth_pass 1111
        }
        virtual_ipaddress {
            172.25.16.100
        }
    }

5.资源清单

[root@server1 ansible]# cat inventory 
    [lb]
    server1 STATE=MASTER VRID=31 PRIORITY=100
    server4 STATE=BASKUP VRID=31 PRIORITY=50
    
    [test]
    server2
    
    [prod]
    server3
    
    [webserver:children]
    test
    prod

## 主安装文件 ##

[devlops@server1 ansible]$ cat install.yml
    ---
    - hosts: all
      tasks:
        - import_role:
            name: apache
          when: ansible_hostname in groups['webserver']
        - import_role:
            name: haproxy
          when: ansible_hostname in groups['lb']
        - import_role:
            name: keepalived
          when: ansible_hostname in groups['lb']
          
    [devlops@server1 ansible]$ ansible-playbook apache.yml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70]  
vip在server1上  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 1]

测试：

浏览器输入：server1ip（172.25.16.1）  
![在这里插入图片描述][20190811115619910.png]  
![在这里插入图片描述][20190811115623221.png]

关闭server1的keepalived,vip漂移到server4  
![在这里插入图片描述][2019081111583055.png]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 2]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 3]

[20190811114636574.png]: /images/20211019/1c42e8506c3a48ab91b01f6094a4874e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70]: /images/20211019/d0380629596c4047b2957a19acc870cd.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 1]: /images/20211019/75df438e52fc4f74a689cefb46dc658d.png
[20190811115619910.png]: /images/20211019/0a5bf6cf45224296b877d51c94f6dfc5.png
[20190811115623221.png]: /images/20211019/580687978cfa4f4c9342a6dff42226c8.png
[2019081111583055.png]: /images/20211019/d3dcdbdfba0f4277894755e62186e22b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 2]: /images/20211019/936b9937fa854427b44982b0e0ade9f6.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDg4OTYxNg_size_16_color_FFFFFF_t_70 3]: /images/20211019/dbab77adf2ea48f8878fb0cddaffe812.png