[keepalived] Rafraichissement de la conf
							parent
							
								
									223ff3e300
								
							
						
					
					
						commit
						28fa6e0a94
					
				| 
						 | 
					@ -5,26 +5,33 @@ glob_keepalived:
 | 
				
			||||||
  mail_destination: root@crans.org
 | 
					  mail_destination: root@crans.org
 | 
				
			||||||
  smtp_server: smtp.adm.crans.org
 | 
					  smtp_server: smtp.adm.crans.org
 | 
				
			||||||
  pool:
 | 
					  pool:
 | 
				
			||||||
    dhcp:
 | 
					    all:
 | 
				
			||||||
      password: "plopisverysecure"
 | 
					      password: "plopisverysecure"
 | 
				
			||||||
      id: 60
 | 
					      id: 60
 | 
				
			||||||
      ipv6: yes
 | 
					      ipv6: yes
 | 
				
			||||||
      notify: /usr/scripts/notify-dhcp
 | 
					      notify: /usr/scripts/notify-dhcp
 | 
				
			||||||
      zones:
 | 
					      zones:
 | 
				
			||||||
 | 
					        - vlan: zayo
 | 
				
			||||||
 | 
					          ipv4: 158.255.113.73/31
 | 
				
			||||||
 | 
					          brd: false
 | 
				
			||||||
 | 
					          ipv6: 2001:1b48:2:103::bb:2/126
 | 
				
			||||||
 | 
					        - vlan: srv
 | 
				
			||||||
 | 
					          ipv4: 185.230.79.62/26
 | 
				
			||||||
 | 
					          ipv6: 2a0c:700:2::ff:fe00:9902/64
 | 
				
			||||||
 | 
					        - vlan: srv_nat
 | 
				
			||||||
 | 
					          ipv4: 172.16.3.99/24
 | 
				
			||||||
 | 
					          ipv6: 2a0c:700:3::ff:fe00:9903/64
 | 
				
			||||||
 | 
					        - vlan: accueil
 | 
				
			||||||
 | 
					          ipv4: 172.16.14.99/24
 | 
				
			||||||
 | 
					        - vlan: infra
 | 
				
			||||||
 | 
					          ipv4: 172.16.32.99/22
 | 
				
			||||||
 | 
					          ipv6: fd00::11:0:ff:fe00:9911/64
 | 
				
			||||||
        - vlan: adh
 | 
					        - vlan: adh
 | 
				
			||||||
          ipv4: 185.230.78.99/24
 | 
					          ipv4: 185.230.78.99/24
 | 
				
			||||||
          brd: true
 | 
					 | 
				
			||||||
          ipv6: 2a0c:700:12::ff:fe00:9912/48
 | 
					          ipv6: 2a0c:700:12::ff:fe00:9912/48
 | 
				
			||||||
        - vlan: adh_nat
 | 
					        - vlan: adh_nat
 | 
				
			||||||
          ipv4: 100.64.0.99/16
 | 
					          ipv4: 100.64.0.99/16
 | 
				
			||||||
          brd: true
 | 
					 | 
				
			||||||
          ipv6: 2a0c:700:13::ff:fe00:9913/48
 | 
					          ipv6: 2a0c:700:13::ff:fe00:9913/48
 | 
				
			||||||
    radius:
 | 
					        - vlan: federez
 | 
				
			||||||
      password: 'plopisverysecure'
 | 
					          ipv4: 100.65.0.99/16
 | 
				
			||||||
      id: 61
 | 
					          ipv6: 2a0c:700:254::ff:fe00:99fe/64
 | 
				
			||||||
      ipv6: yes
 | 
					 | 
				
			||||||
      zones:
 | 
					 | 
				
			||||||
        - vlan: infra
 | 
					 | 
				
			||||||
          ipv4: 172.16.32.99/22
 | 
					 | 
				
			||||||
          brd: true
 | 
					 | 
				
			||||||
          ipv6: fd00::11:0:ff:fe00:9911/64
 | 
					 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -6,17 +6,15 @@ interfaces:
 | 
				
			||||||
  infra: ens21
 | 
					  infra: ens21
 | 
				
			||||||
  adh: ens22
 | 
					  adh: ens22
 | 
				
			||||||
  adh_nat: ens23
 | 
					  adh_nat: ens23
 | 
				
			||||||
 | 
					  zayo: enp1s3
 | 
				
			||||||
 | 
					  federez: enp1s4
 | 
				
			||||||
 | 
					
 | 
				
			||||||
firewall:
 | 
					firewall:
 | 
				
			||||||
  version: HEAD
 | 
					  version: HEAD
 | 
				
			||||||
 | 
					
 | 
				
			||||||
loc_keepalived:
 | 
					loc_keepalived:
 | 
				
			||||||
  instances:
 | 
					  instances:
 | 
				
			||||||
    - name: dhcp
 | 
					    - name: all
 | 
				
			||||||
      tag: VI_DHCP
 | 
					      tag: VI_ALL
 | 
				
			||||||
      state: BACKUP
 | 
					 | 
				
			||||||
      priority: 100
 | 
					 | 
				
			||||||
    - name: radius
 | 
					 | 
				
			||||||
      tag: VI_RAD
 | 
					 | 
				
			||||||
      state: BACKUP
 | 
					      state: BACKUP
 | 
				
			||||||
      priority: 100
 | 
					      priority: 100
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -0,0 +1,21 @@
 | 
				
			||||||
 | 
					---
 | 
				
			||||||
 | 
					interfaces:
 | 
				
			||||||
 | 
					  adm: ens18
 | 
				
			||||||
 | 
					  srv: ens19
 | 
				
			||||||
 | 
					  srv_nat: ens20
 | 
				
			||||||
 | 
					  infra: ens21
 | 
				
			||||||
 | 
					  adh: ens22
 | 
				
			||||||
 | 
					  adh_nat: ens23
 | 
				
			||||||
 | 
					  zayo: enp1s3
 | 
				
			||||||
 | 
					  federez: enp1s4
 | 
				
			||||||
 | 
					  accueil: ens1
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					firewall:
 | 
				
			||||||
 | 
					  version: HEAD
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					loc_keepalived:
 | 
				
			||||||
 | 
					  instances:
 | 
				
			||||||
 | 
					    - name: all
 | 
				
			||||||
 | 
					      tag: VI_ALL
 | 
				
			||||||
 | 
					      state: BACKUP
 | 
				
			||||||
 | 
					      priority: 50
 | 
				
			||||||
| 
						 | 
					@ -1,24 +1,22 @@
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
interfaces:
 | 
					interfaces:
 | 
				
			||||||
  adm: ens18
 | 
					 | 
				
			||||||
  srv: ens19
 | 
					  srv: ens19
 | 
				
			||||||
  srv_nat: ens20
 | 
					  srv_nat: ens20
 | 
				
			||||||
 | 
					  adm: ens18
 | 
				
			||||||
  infra: ens21
 | 
					  infra: ens21
 | 
				
			||||||
  adh: ens22
 | 
					  adh: ens22
 | 
				
			||||||
  adh_nat: ens23
 | 
					  adh_nat: ens23
 | 
				
			||||||
  srv_old: ens1
 | 
					  zayo: enp1s3
 | 
				
			||||||
 | 
					  federez: enp1s4
 | 
				
			||||||
 | 
					  accueil: ens1
 | 
				
			||||||
 | 
					
 | 
				
			||||||
firewall:
 | 
					firewall:
 | 
				
			||||||
  version: HEAD
 | 
					  version: HEAD
 | 
				
			||||||
 | 
					
 | 
				
			||||||
loc_keepalived:
 | 
					loc_keepalived:
 | 
				
			||||||
  instances:
 | 
					  instances:
 | 
				
			||||||
    - name: dhcp
 | 
					    - name: all
 | 
				
			||||||
      tag: VI_DHCP
 | 
					      tag: VI_ALL
 | 
				
			||||||
      state: MASTER
 | 
					 | 
				
			||||||
      priority: 150
 | 
					 | 
				
			||||||
    - name: radius
 | 
					 | 
				
			||||||
      tag: VI_RAD
 | 
					 | 
				
			||||||
      state: MASTER
 | 
					      state: MASTER
 | 
				
			||||||
      priority: 150
 | 
					      priority: 150
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -26,7 +26,7 @@ vrrp_instance {{ instance.tag }}4 {
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  virtual_ipaddress {
 | 
					  virtual_ipaddress {
 | 
				
			||||||
{% for zone in keepalived.pool[instance.name].zones %}
 | 
					{% for zone in keepalived.pool[instance.name].zones %}
 | 
				
			||||||
{% if zone.brd  %}
 | 
					{% if zone.brd is undefined or zone.brd  %}
 | 
				
			||||||
      {{ zone.ipv4 }} brd {{ zone.ipv4 | ipaddr('broadcast') }} dev {{ interfaces[zone.vlan] }} scope global
 | 
					      {{ zone.ipv4 }} brd {{ zone.ipv4 | ipaddr('broadcast') }} dev {{ interfaces[zone.vlan] }} scope global
 | 
				
			||||||
{% else %}
 | 
					{% else %}
 | 
				
			||||||
      {{ zone.ipv4 }} dev {{ interfaces[zone.vlan] }} scope global
 | 
					      {{ zone.ipv4 }} dev {{ interfaces[zone.vlan] }} scope global
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in New Issue