Merge pull request #50 from cloudscale-ch/ha-groups

HA groups

Author: lae

README.md

@@ -435,6 +435,22 @@ pve_datacenter_cfg:
   keyboard: en-us
 ```
 
+You can also configure [HA manager groups][ha-group]:
+```
+pve_cluster_ha_groups: [] # List of HA groups to create in PVE.
+```
+
+This example creates a group "lab_node01" for resources assigned to the
+lab-node01 host:
+```
+pve_cluster_ha_groups:
+  - name: lab_node01
+    comment: "My HA group"
+    nodes: "lab-node01"
+    nofailback: 0
+    restricted: 0
+```
+
 All configuration options supported in the datacenter.cfg file are documented in the
 [Proxmox manual datacenter.cfg section][datacenter-cfg].
 
@@ -633,3 +649,4 @@ Michael Holasek ([@mholasek](https://github.com/mholasek))
 [storage-module]: https://github.com/lae/ansible-role-proxmox/blob/master/library/proxmox_storage.py
 [datacenter-cfg]: https://pve.proxmox.com/wiki/Manual:_datacenter.cfg
 [ceph_volume]: https://github.com/ceph/ceph-ansible/blob/master/library/ceph_volume.py
+[ha-group]: https://pve.proxmox.com/wiki/High_Availability#ha_manager_groups

defaults/main.yml

@@ -32,6 +32,7 @@ pve_cluster_clustername: "{{ pve_group }}"
 # pve_cluster_addr0: "{{ ansible_default_ipv4.address }}"
 # pve_cluster_addr1: "{{ ansible_eth1.ipv4.address }}
 pve_datacenter_cfg: {}
+pve_cluster_ha_groups: []
 pve_ssl_letsencrypt: false
 pve_groups: []
 pve_users: []

tasks/pve_cluster_config.yml

@@ -67,3 +67,37 @@
   when:
     - "_pve_active_cluster is not defined"
     - "inventory_hostname != groups[pve_group][0]"
+
+- name: Check for PVE cluster HA groups
+  proxmox_query:
+    query: "/cluster/ha/groups"
+  register: _ha_group_list
+  when: "inventory_hostname == groups[pve_group][0]"
+
+- name: Create PVE cluster HA groups
+  command: >-
+    ha-manager groupadd {{ item.name }}
+    -comment "{{ item.comment | default('') }}"
+    -nodes "{{ item.nodes }}"
+    {% if 'nofailback' in item %}
+    -nofailback {{ item.nofailback }}
+    {% endif %}
+    {% if 'restricted' in item %}
+    -restricted {{ item.restricted }}
+    {% endif %}
+  when:
+    - "inventory_hostname == groups[pve_group][0]"
+    - item.name not in _ha_group_list.response | json_query("[*].group")
+  with_items: "{{ pve_cluster_ha_groups }}"
+
+- name: Update PVE cluster HA groups
+  command: >-
+    ha-manager groupset {{ item.0.name }} -{{ item.1 }} "{{ item.0[item.1] }}"
+  when:
+    - "inventory_hostname == groups[pve_group][0]"
+    - item.0.name in _ha_group_list.response | json_query("[*].group")
+    - item.1 in item.0
+    - item.0[item.1] != _ha_group_list.response
+                        | json_query("[?group=='" + item.0.name + "']." + item.1) | first
+  loop: "{{ pve_cluster_ha_groups
+            | product(['comment', 'nodes', 'nofailback', 'restricted']) | list }}"

tests/group_vars/all

@@ -15,6 +15,11 @@ pve_ssl_certificate: "{{ lookup('file', ssl_host_cert_path) }}"
 pve_cluster_enabled: yes
 pve_datacenter_cfg:
   console: xtermjs
+pve_cluster_ha_groups:
+  - name: proxmox_5_01
+    comment: "Resources on proxmox-5-01"
+    nodes: proxmox-5-01
+    restricted: 1
 pve_groups:
   - name: Admins
     comment: Administrators of this PVE cluster

tests/test.yml

@@ -80,6 +80,24 @@
       assert:
         that: "'console: xtermjs' in datacenter_cfg.content | b64decode"
 
+    - name: Query PVE HA groups
+      command: "pvesh get /cluster/ha/groups --output=json"
+      register: _ha_group_list
+      run_once: true
+
+    - name: Check PVE HA group configuration
+      assert:
+        that:
+          - item.name == ha_group.group
+          - item.comment == ha_group.comment
+          - item.nodes == ha_group.nodes
+          - item.restricted == ha_group.restricted
+          - "'nofailback' not in ha_group"
+      vars:
+        ha_group: '{{ _ha_group_list.stdout | from_json
+                      | json_query("[?group==''" + item.name + "'']") | first }}'
+      with_items: "{{ pve_cluster_ha_groups }}"
+
     - block:
       - name: pvedaemon service status
         shell: "journalctl --no-pager -xu pvedaemon.service"