Etapa 1 – Instalando HAProxy e Keepalived para Load Balancer

• Instalação dos pacotes
• Configuração do haproxy.cfg
• Criação do keepalived.conf
• Ativação dos serviços

Estrutura dos arquivos

ansible-haproxy-keepalived/
├── hosts
├── install-lb.yml
└── roles/
    └── haproxy_keepalived/
        ├── tasks/
        │   └── main.yml
        └── templates/
            ├── haproxy.cfg.j2
            └── keepalived.conf.j2

Arquivo hosts

[loadbalancers]
lb1 ansible_host=192.168.1.190 priority=101 state=MASTER
lb2 ansible_host=192.168.1.191 priority=100 state=BACKUP

ansible_user=ubuntu vip=192.168.1.200 interface=eth0

Playbook  install-lb.yml

- name: Instalação do HAProxy e Keepalived nos LBs
  hosts: loadbalancers
  become: yes
  roles:
    - haproxy_keepalived

roles/haproxy_keepalived/tasks/main.yml

- name: Instalar pacotes
  apt:
    name: "{{ item }}"
    state: present
    update_cache: yes
  loop:
    - haproxy
    - keepalived
- name: Copiar arquivo haproxy.cfg
  template:
    src: haproxy.cfg.j2
    dest: /etc/haproxy/haproxy.cfg
    owner: root
    group: root
    mode: '0644'
  notify: Restart HAProxy
- name: Copiar arquivo keepalived.conf
  template:
    src: keepalived.conf.j2
    dest: /etc/keepalived/keepalived.conf
    owner: root
    group: root
    mode: '0644'
  notify: Restart Keepalived
- name: Ativar e iniciar serviços
  systemd:
    name: "{{ item }}"
    enabled: yes
    state: started
  loop:
    - haproxy
    - keepalived

roles/haproxy_keepalived/templates/haproxy.cfg.j2

global
    log /dev/log local0
    maxconn 2048
    daemon
defaults
    log     global
    mode    tcp
    option  tcplog
    timeout connect 10s
    timeout client 1m
    timeout server 1m
frontend kubernetes-api
    bind *:6443
    default_backend kubernetes-masters
backend kubernetes-masters
    balance roundrobin
    server master1 192.168.1.201:6443 check
    server master2 192.168.1.202:6443 check
    server master3 192.168.1.203:6443 check

roles/haproxy_keepalived/templates/keepalived.conf.j2

vrrp_instance VI_1 {
    state {{ state }}
    interface {{ interface }}
    virtual_router_id 51
    priority {{ priority }}
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass kubevip
    }
    virtual_ipaddress {
        {{ vip }}
    }
}

Executar

cd ansible-haproxy-keepalived
ansible-playbook -i hosts install-lb.yml

Resultado

• lb1 e lb2 prontos com HAProxy e Keepalived
• IP virtual flutuante em 192.168.1.200
• Pronto para usar no kubeadm init