Initial revision

Initial revision with single ring support

Author: leucos

.gitignore

@@ -0,0 +1,3 @@
+.vagrant
+vagrant
+

README.md

@@ -0,0 +1,10 @@
+ansible-pacemaker-corosync role
+===============================
+
+Deploys corosync/pacemaker on Ubuntu 14.04
+
+# Variables
+
+- `pacemaker_corosync_group`: Ansible group name for corosync cluster (default: false, *mandatory*)
+- `pacemaker_corosync_ring_interface`: Interface to use for ring0 communications (default: false, *mandatory*)
+

defaults/main.yml

@@ -0,0 +1,2 @@
+pacemaker_corosync_group: false
+pacemaker_corosync_ring_interface: false

files/pcmk

@@ -0,0 +1,4 @@
+service {
+  name: pacemaker
+  ver: 1
+}

handlers/main.yml

@@ -0,0 +1,7 @@
+- name: Restart corosync
+  service: 
+    name: "{{ item }}"
+    state: restarted
+  with_items:
+    - corosync
+    - pacemaker

meta/main.yml

@@ -0,0 +1,16 @@
+---
+
+dependencies: []
+
+galaxy_info:
+  author: Michel Blanc
+  company: ACME Corp
+  description: ansible-pacemaker-corosync role
+  license: MIT
+  min_ansible_version: 1.6
+  platforms:
+  - name: Ubuntu
+    versions:
+    - all
+  categories:
+  - system

tasks/check_vars.yml

@@ -0,0 +1,6 @@
+- name: Checking that required variables are set
+  fail: msg="{{ item }} is not defined"
+  when: not {{ item }}
+  with_items:
+    - pacemaker_corosync_group
+    - pacemaker_corosync_ring_interface

tasks/main.yml

@@ -0,0 +1,2 @@
+- include: check_vars.yml tags=pacemaker,check
+- include: pacemaker.yml tags=pacemaker

tasks/pacemaker.yml

@@ -0,0 +1,71 @@
+- name: Installs pacemaker & corosync
+  apt: pkg={{item}} state=latest
+  with_items:
+    - corosync
+    - pacemaker
+    - haveged
+
+- name: Generates corosync key
+  become: true
+  become_user: root
+  command: corosync-keygen
+  args:
+    creates: /etc/corosync/authkey
+  when: inventory_hostname == groups[pacemaker_corosync_group][0]
+  register: __corosync_authkey_created
+  notify: Restart corosync
+
+- name: Copy authkey to other nodes
+  synchronize: src=/etc/corosync/authkey dest=/etc/corosync/authkey
+  delegate_to: "{{ groups[pacemaker_corosync_group][0] }}"
+  when: inventory_hostname != groups[pacemaker_corosync_group][0]
+  notify: Restart corosync
+
+- name: Chowns authkeys
+  file:
+    path: /etc/corosync/authkey
+    mode: 0400
+    owner: root
+  notify: Restart corosync
+
+- name: Creates corosync config
+  template:
+    src: corosync.conf.j2
+    dest: /etc/corosync/corosync.conf
+    mode: 0400
+    owner: root
+  notify: Restart corosync
+
+- name: Adds logrotate config for corosync
+  template:
+    src: corosync_logrotate.conf.j2
+    dest: /etc/logrotate.d/corosync
+    mode: 0644
+    owner: root
+
+- name: Adds pacemaker service
+  copy:
+    src: pcmk
+    dest: /etc/corosync/service.d/pcmk
+    owner: root
+    mode: 0400
+  notify: Restart corosync
+
+- name: Adds ferm filtering
+  template:
+    src: "../templates/ferm.j2"
+    dest: /etc/ferm/filter-input.d/60_corosync.conf
+  when: ferm_enabled | default(false)
+  tags: ferm
+  notify: Restart ferm
+
+- name: Enables corosync at boot
+  copy:
+    dest: /etc/default/corosync
+    content: "START=yes"
+
+- name: Registers pacemaker service
+  service:
+    name: pacemaker
+    enabled: true
+

templates/corosync.conf.j2

@@ -0,0 +1,39 @@
+totem {
+  version: 2
+  cluster_name: {{ pacemaker_corosync_group }}
+  transport: udpu
+  interface {
+    ringnumber: 0
+    bindnetaddr: {{ hostvars[inventory_hostname]['ansible_' + pacemaker_corosync_ring_interface].ipv4.address }}
+    broadcast: yes
+    mcastport: 5405
+  }
+}
+
+quorum {
+  provider: corosync_votequorum
+{% if groups[pacemaker_corosync_group]|count == 2 %}
+  two_node: 1
+{% else %}
+  wait_for_all: 1
+  last_man_standing: 1
+{% endif %}
+}
+
+nodelist {
+{% for node in groups[pacemaker_corosync_group]|sort %}
+  node {
+    ring0_addr: {{ hostvars[node]['ansible_' + pacemaker_corosync_ring_interface].ipv4.address }}
+    name: {{ node }}
+    nodeid: {{ loop.index }}
+  }
+{% endfor %}
+}
+
+logging {
+  to_logfile: yes
+  logfile: /var/log/corosync/corosync.log
+  to_syslog: yes
+  timestamp: on
+}
+