13分でPostgreSQLの冗長化構成をAnsibleで高速構築してみた！

追加作業

[local]
localhost.localdomain

[nodes]
un087.localdomain
un088.localdomain

[node1]
un087.localdomain

[node2]
un088.localdomain

[template]
192.168.135.81

– name: Create Virtual Machine(Source node)
  hosts: local
  gather_facts: false
  tasks:
    – include_vars: vars/vmware_info.yml
    – include_vars: vars/template_node1_info.yml
    – include_tasks: vmware/deploy_guestvm.yml

– name: Edit Primary IP and Hostname(Source node).
  hosts: template
  tasks:
    – include_vars: vars/network_info.yml
    – include_vars: vars/template_node1_info.yml
    – include_tasks: vmware/edit_priip_hostname.yml

– name: Edit Secondary IP(Source node).
  hosts: node1
  tasks:
    – include_vars: vars/network_info.yml
    – include_vars: vars/template_node1_info.yml
    – include_tasks: vmware/edit_secip.yml

– name: Create Virtual Machine(Target node)
  hosts: local
  gather_facts: false
  tasks:
    – include_vars: vars/vmware_info.yml
    – include_vars: vars/template_node2_info.yml
    – include_tasks: vmware/deploy_guestvm.yml

– name: Edit Primary IP and Hostname(Target node).
  hosts: template
  tasks:
    – include_vars: vars/network_info.yml
    – include_vars: vars/template_node2_info.yml
    – include_tasks: vmware/edit_priip_hostname.yml

– name: Edit Secondary IP(Target node).
  hosts: node2
  tasks:
    – include_vars: vars/network_info.yml
    – include_vars: vars/template_node2_info.yml
    – include_tasks: vmware/edit_secip.yml

– name: deploy and install lifekeeper on all targets
  hosts: nodes
  tasks:
    – include_vars: vars/works.yml
    – include_vars: vars/template_node1_info.yml
    – include_vars: vars/template_node2_info.yml
    – include_tasks: lk_install/hosts.yml
    – include_tasks: lk_install/firewall.yml}
    – include_tasks: lk_install/selinux.yml
    – include_tasks: lk_install/deploy.yml
    – include_tasks: lk_install/mount.yml
    – include_tasks: lk_install/install.yml
    – include_tasks: lk_install/bash_profile.yml
    – include_tasks: lk_install/license.yml
    – include_tasks: lk_install/lkstart.yml
    – include_tasks: lk_install/clean.yml

– name: create communication path on source
  hosts: node1
  tasks:
    – include_vars: vars/template_node1_info.yml
    – include_tasks: commpath/add_source_compath.yml

– name: create communication path on target
  hosts: node2
  tasks:
    – include_vars: vars/template_node2_info.yml
    – include_tasks: commpath/add_target_compath.yml

– name: create partition
  hosts: nodes
  tasks:
    – include_vars: vars/disk_info.yml
    – include_tasks: datakeeper/disk.yml

– name: Broadcast ping off/Install postgreSQL server and create DB.
  hosts: nodes
  tasks:
  – include_tasks: ip/nobcastping.yml
  – include_tasks: postgresql/inst_pgsql.yml

– name: Create Resources.(DataKeeper, IP, PostgreSQL)
  hosts: node1
  tasks:
   – include_vars: vars/disk_info.yml
   – include_vars: vars/vip_info.yml
   – include_vars: vars/template_node1_info.yml
   – include_vars: vars/template_node2_info.yml
   – include_vars: vars/pgsql_info.yml
   – include_tasks: datakeeper/new_replication.yml
   – include_tasks: ip/ip_resource.yml
   – include_tasks: postgresql/init_db.yml
   – include_tasks: postgresql/pgsql_resource.yml
   – include_tasks: dependency/create_dep_resources.yml

# レプリケーション用デバイス
disk_device: /dev/sdb
# パーティション番号(ex. sdb1 の1)
disk_num: 1
# パーティションタイプ
disk_label: gpt
# ファイルシステム
disk_fstype: ext4
# レプリケーションリソースタグ
dk_tag: replication-sdb1
# 同期モード
sync_mode: synchronous
# レプリケーションタイプ
rep_type: new
# マウントポイント
mount_dir: /pgdata
# ファイルシステムリソースタグ
fs_tag: /pgdata

# プライマリIPアドレスNIC
pri_nic: ens192
# セカンダリIPアドレスNIC
sec_nic: ens224
# Default Gateway
pri_gateway: 10.125.0.1
# DNS Server
pri_dns: 10.125.0.1,10.125.0.3

# postgresql server port.
pg_port: 5432               
# postgresql data directory.
initdb_dir: “{{ mount_dir}}/data1”
# postgresql socket file
socket_file: /tmp/.s.PGSQL.5432
# postgresql server 実行ユーザー
pg_user: postgres
# postgresql server LifeKeeper: log.
lk_pg_log: pgsql-lk.log

# 作成するVM Name
vm_name: dbv-rh79-1
# 展開する ESXi Server
deploy_esxi_host: 10.125.128.2
# node1 の新しいプライマリIPアドレス
node1_pri_ip: 10.125.135.87
# node1 の新しいプライマリIPアドレス Prefix
node1_pri_prefix: 24
# node1 の新しいセカンダリIPアドレス
node1_sec_ip: 192.168.135.87
# node1 の新しいセカンダリIPアドレス Prefix
node1_sec_prefix: 24
# node1 new ホスト名
node1_hostname: un087.localdomain
# 置き換え（＊編集不要）
pri_ip: “{{ node1_pri_ip }}”
pri_prefix: “{{ node1_pri_prefix }}”
sec_ip: “{{ node1_sec_ip }}”
sec_prefix: “{{ node1_sec_prefix }}”
new_hostname: “{{ node1_hostname }}”

# 作成するVM Name
vm_name: dbv-rh79-2
# 展開する ESXi Server
deploy_esxi_host: 10.125.128.3
# node2 の新しいプライマリIPアドレス
node2_pri_ip: 10.125.135.88
# node2 の新しいプライマリIPアドレス Prefix
node2_pri_prefix: 24
# node2 の新しいセカンダリIPアドレス
node2_sec_ip: 192.168.135.88
# node2 の新しいセカンダリIPアドレス Prefix
node2_sec_prefix: 24
# node2 new ホスト名
node2_hostname: un088.localdomain
# 置き換え（＊編集不要）
pri_ip: “{{ node2_pri_ip }}”
pri_prefix: “{{ node2_pri_prefix }}”
sec_ip: “{{ node2_sec_ip }}”
sec_prefix: “{{ node2_sec_prefix }}”
new_hostname: “{{ node2_hostname }}”

# 仮想IPアドレス
vip: 10.125.135.86
# 仮想IPアドレスのネットマスク
netmask: 255.255.255.0
# uni cast ping 送信先(pinglist)　＊複数の場合はカンマ(,)で区切る
target_ip: 10.125.135.10

# vCenter ホスト
vcenter_hostname: vcsa.localdomain
# vCenter ログインアカウント
vcenter_username: administrator@vsphere.local
# vCenter ログインアカウントパスワード
vcenter_password: ********************
# データセンター名
vcenter_datacenter: Datacenter
# VMの保管先
deployed_folder: “/Datacenter/vm/個人用/tuno”
# 展開元のテンプレート
vm_template: dbv-temp79

# control-node側でインストールに必要なファイルを保存しておくディレクトリ
control_node_dir: /root/sios
# ターゲット側でインストールに一時的に必要なファイルを保存しておくディレクトリ
target_dir: /tmp/lifekeeper
# CentOS7.9 DataKeeper用patchのダウンロードURL
patch_url:https://lkdkuserportal.sios.jp/hc/article_attachments/900004959446/lk-rhel7_9-support
# ターゲット側でインストールイメージのマウントディレクトリ
target_mnt: /sps
# LifeKeeper/DataKeeper が利用して公開するポート
lk_ports: [ 7365/tcp, 10001-49151/tcp ]

– name: vCenterに接続してVMを作成
  vmware_guest:
    name: “{{ vm_name }}”
    hostname: “{{ vcenter_hostname }}”
    username: “{{ vcenter_username }}”
    password: “{{ vcenter_password }}”
    datacenter: “{{ vcenter_datacenter }}”
    folder: “{{ deployed_folder}}”
    validate_certs: false
    template: “{{ vm_template }}”
    state: poweredon             # 起動状態にする
    esxi_hostname: “{{ deploy_esxi_host }}”
    wait_for_ip_address: yes
  delegate_to: localhost

– name: プライマリIPアドレスの変更
  command: nmcli connection modify {{ pri_nic }} ipv4.method manual ipv4.addresses {{ pri_ip }}/{{ pri_prefix }} ipv4.gateway {{ pri_gateway }} ipv4.dns {{ pri_dns }}

– name: プライマリIPアドレスの更新
  shell: sleep 1; ifdown {{ pri_nic }} && ifup {{ pri_nic }}
  async: 5
  poll: 0

– name: ホスト名 “{{ new_hostname }}”への変更.
  become: true
  hostname:
    name: “{{ new_hostname }}”

– name: プライマリIPアドレスの変更
  command: nmcli connection modify {{ pri_nic }} ipv4.method manual ipv4.addresses {{ pri_ip }}/{{ pri_prefix }} ipv4.gateway {{ pri_gateway }} ipv4.dns {{ pri_dns }}

– name: プライマリIPアドレスの更新
  shell: sleep 1; ifdown {{ pri_nic }} && ifup {{ pri_nic }}
  async: 5
  poll: 0

– name: ホスト名 “{{ new_hostname }}”への変更.
  become: true
  hostname:
    name: “{{ new_hostname }}”

# /etc/hostsにansibleを実行対象のホストをすべて登録する
– name: update /etc/hosts
  lineinfile:
    dest: /etc/hosts
    state: present
    insertafter: EOF
    regexp: “^{{ item.address }}”
    line: “{{ item.address }}\t{{ item.hostname }}”
  with_items:
    – address: “{{ node1_pri_ip }}”
      hostname: “{{ node1_hostname }}”
    – address: “{{ node2_pri_ip }}”
      hostname: “{{ node2_hostname }}”

– name: enable lifekeeper port
  firewalld:
    zone: public
    port: “{{ item }}”
    permanent: yes
    state: enabled
  register: firewalld
  with_items:
    – “{{ lk_ports }}”

– name: reload
  command: firewall-cmd –reload
  when: firewalld.changed

– name: disable SELinux
  become: yes
  selinux: state=disabled
  register: selinux

– name: reboot a node
  become: yes
  reboot:
  when: selinux.reboot_required

– name: deploy to lifekeeper install files
  copy:
    src: “{{ control_node_dir }}”
    dest: “{{ target_dir }}”

– name: Download DataKeeper patch for CentOS 7.9
  get_url:
    url: “{{ patch_url }}”
    dest: “{{ target_dir }}/sios”
    mode: 0644

– name: mount setup image
  mount:
    path: “{{ target_mnt }}”
    src: “{{ target_dir }}/sios/sps_951.img”
    fstype: iso9660
    state: mounted

  – name: install lifekeeper
    shell:                                
      # setupを直接実行すると失敗します。
      cmd: script -q -e -c “{{ target_mnt | quote }}/setup -f {{ target_dir | quote }}/sios/LKCONF -q y –addinfo {{ target_dir | quote }}/sios/lk-rhel7_9-support” {{ target_dir | quote }}/sios/lifekeeper_install.log

– name: update lifekeeper PATH in bash_profile
  blockinfile:
    path: /root/.bash_profile
    marker: “# {mark} ANSIBLE MANAGED BLOCK: LifeKeeper”
    block: |
      PATH=$PATH:/opt/LifeKeeper/bin
      MANPATH=$MANPATH:/opt/LifeKeeper/man｝
      export PATH MANPATH

– name: install lifekeeper license
  shell:
    cmd: |
      for file in `ls`; do
        /opt/LifeKeeper/bin/lkcli license –file $file
      done
    chdir: “{{ target_dir }}/sios/licenses/{{ inventory_hostname }}”

– name: start lifekeeper
  command: /opt/LifeKeeper/bin/lkcli start

– name: lifekeeper status
  command: /opt/LifeKeeper/bin/lkcli status
  register: check_comm_path

– name: Show communication path(Source).
  debug:
    msg: “{{ check_comm_path.stdout_lines }}”

– name: unmount a mounted lifekeeper image
  mount:
    path: “{{ target_mnt }}”
    state: absent

– name: delete lifekeeper files
  file:
    path: “{{ target_dir }}”
    state: absent

– name: Create primary communication path(Source).
  command: /opt/LifeKeeper/bin/lkcli commpath create –laddr “{{ node1_pri_ip }}” –raddr “{{ node2_pri_ip }}” –dest “{{ node2_hostname }}”

– name: Create secondary communication path(Source).
  command: /opt/LifeKeeper/bin/lkcli commpath create –laddr “{{ node1_sec_ip }}” –raddr “{{ node2_sec_ip }}” –dest “{{ node2_hostname }}”

– name: Create primary communication path(Target).
  command: /opt/LifeKeeper/bin/lkcli commpath create –laddr “{{ node2_pri_ip }}” –raddr “{{ node1_pri_ip }}” –dest “{{ node1_hostname }}”

– name: Create secondary communication path(Target).
  command: /opt/LifeKeeper/bin/lkcli commpath create –laddr “{{ node2_sec_ip }}” –raddr “{{ node1_sec_ip }}” –dest “{{ node1_hostname }}”

– name: Check communication paths.
  command: /opt/LifeKeeper/bin/lkcli status -q
  register: check_comm_path

– name: Show communication paths.
  debug:
    msg: “{{ check_comm_path.stdout_lines }}”

– name: “parted {{ disk_device }}”
  parted:
    device: “{{ disk_device }}”
    number: “{{ disk_num }}”
    state: present
    label: “{{ disk_label }}”
   become: yes
   become_user: root

– name: “format {{ disk_device }}{{ disk_num }}”
  filesystem:
    dev: “{{ disk_device }}{{ disk_num }}”
    fstype: “{{ disk_fstype }}”
  become: yes
  become_user: root

– name: Create DataKeeper resource.
  command: /opt/LifeKeeper/bin/lkcli resource create dk –tag “{{ dk_tag }}” –mode “{{ sync_mode }}” –hierarchy “{{ rep_type }}” –device “{{ disk_device }}{{ disk_num }}” –fstype “{{ disk_fstype }}” –mount_point “{{ mount_dir }}” –fstag “{{ fs_tag }}”

– name: Extend DataKeeper resource.
  command: /opt/LifeKeeper/bin/lkcli resource extend dk –tag “{{ dk_tag }}” –mode “{{ sync_mode }}” –dest “{{ node2_hostname }}” –laddr “{{ node1_sec_ip }}” –raddr “{{ node2_sec_ip }}” –fstag “{{ fs_tag }}”

– name: Check resources.
  command: /opt/LifeKeeper/bin/lkcli status -q
  register: check_comm_path

– name: Show Resource tree.
  debug:
    msg: “{{ check_comm_path.stdout_lines }}”

– name: ブロードキャストPINGの無効化
  replace:
    dest: /etc/default/LifeKeeper
    regexp: ‘NOBCASTPING=0’
    replace: ‘NOBCASTPING=1’

– name: Create IP resource.
  command: /opt/LifeKeeper/bin/lkcli resource create ip –tag ip-“{{ vip }}” –ipaddr “{{ vip }}” –netmask “{{ netmask }}”

– name: Config IP resource.
  command: /opt/LifeKeeper/bin/lkcli resource config ip –tag “ip-{{ vip }}” –pinglist “{{ target_ip }}”

– name: Extend IP resource.
  command: /opt/LifeKeeper/bin/lkcli resource extend ip –tag “ip-{{ vip }}” –dest “{{ node2_hostname }}”

– name: Check resources
  command: /opt/LifeKeeper/bin/lkcli status -q
  register: check_comm_path

– name: Show Resource tree.
  debug:
    msg: “{{ check_comm_path.stdout_lines }}”

– name: install postgresql-server.
  yum:
   name: postgresql-server
   state: latest

– name: “データベース用ディレクトリの作成“
  file: path={{ initdb_dir }} state=directory owner={{ pg_user }} group={{ pg_user }} mode=755

– name: “データベース有無の確認“
  stat:
    path: “{{ initdb_dir}}/PG_VERSION”
  register: dbcluster

– name: “データベースの初期化“
  shell: /usr/bin/initdb –no-locale -D {{ initdb_dir }} –encoding=UTF-8
  become: yes
  become_user: “{{ pg_user }}”
  when: not dbcluster.stat.exists

– name: “データベースの起動“
  command: /usr/bin/pg_ctl -D {{ initdb_dir }} -l {{ initdb_dir }}/postgresql.log start
  become: yes
  become_user: “{{ pg_user }}”

– name: Create postgresql resource.
  command: /opt/LifeKeeper/bin/lkcli resource create pgsql –tag “pgsql{{ pg_port }}” –datadir {{ initdb_dir }} –port {{ pg_port }} –socket {{ socket_file }} –dbuser {{ pg_user }} –logfile “{{ initdb_dir }}/{{ lk_pg_log }}”

– name: Extend postgresql resource.
  command: /opt/LifeKeeper/bin/lkcli resource extend pgsql –tag “pgsql{{ pg_port }}” –dest {{ node2_hostname }}

– name: Check resources.
  command: /opt/LifeKeeper/bin/lkcli status -q
  register: check_comm_path

– name: Show Resource tree.
  debug:
    msg: “{{ check_comm_path.stdout_lines }}”