sync

ansible/playbooks/roles/traefik-manager/defaults/main.yml

@@ -0,0 +1,12 @@
+---
+# Default variables for traefik-manager role
+
+# Traefik Configuration
+traefik_config_dir: "/etc/traefik"
+traefik_host: "{{ traefik_server | default(groups['traefik_servers'][0] | default('localhost')) }}"
+cluster_api_port: 6443
+
+# Cluster Configuration (to be provided by calling role)
+# cluster_name: "fastpass"
+# cluster_endpoint: "fastpass.local.mk-labs.cloud"
+# control_plane_nodes: ["space-mountain", "big-thunder-mountain", "splash-mountain"]

ansible/playbooks/roles/traefik-manager/handlers/main.yml

@@ -0,0 +1,8 @@
+---
+# Handlers for traefik-manager role
+
+- name: reload traefik
+  ansible.builtin.systemd:
+    name: traefik
+    state: reloaded
+  delegate_to: "{{ traefik_host }}"

ansible/playbooks/roles/traefik-manager/tasks/main.yml

@@ -0,0 +1,45 @@
+---
+# role: traefik-manager
+# description: Reusable role for managing Traefik load balancer configuration
+# author: mk-labs
+# version: 1.0.0
+
+- name: Create Traefik configuration directory
+  ansible.builtin.file:
+    path: "{{ traefik_config_dir }}/dynamic"
+    state: directory
+    mode: "0755"
+  delegate_to: "{{ traefik_host }}"
+
+- name: Generate Traefik TCP router configuration for Kubernetes API
+  ansible.builtin.template:
+    src: k8s-api-router.yml.j2
+    dest: "{{ traefik_config_dir }}/dynamic/{{ cluster_name }}-api.yml"
+    mode: "0644"
+  delegate_to: "{{ traefik_host }}"
+  notify: reload traefik
+
+- name: Generate Traefik service configuration for control plane nodes
+  ansible.builtin.template:
+    src: k8s-api-service.yml.j2
+    dest: "{{ traefik_config_dir }}/dynamic/{{ cluster_name }}-service.yml"
+    mode: "0644"
+  delegate_to: "{{ traefik_host }}"
+  notify: reload traefik
+
+- name: Verify Traefik configuration syntax
+  ansible.builtin.command: |
+    traefik --configfile={{ traefik_config_dir }}/traefik.yml --dry-run
+  delegate_to: "{{ traefik_host }}"
+  register: traefik_syntax_check
+  failed_when: traefik_syntax_check.rc != 0
+  changed_when: false
+
+- name: Display Traefik configuration status
+  ansible.builtin.debug:
+    msg: |
+      ✅ Traefik configuration created successfully:
+      - Router: {{ cluster_name }}-api
+      - Service: {{ cluster_name }}-backend
+      - Endpoint: {{ cluster_endpoint }}:{{ cluster_api_port }}
+      - Backend nodes: {{ control_plane_nodes | join(', ') }}

ansible/playbooks/roles/traefik-manager/templates/k8s-api-router.yml.j2

@@ -0,0 +1,23 @@
+---
+# Traefik TCP Router for {{ cluster_name }} Kubernetes API
+tcp:
+  routers:
+    {{ cluster_name }}-api:
+      rule: "HostSNI(`{{ cluster_endpoint }}`)"
+      service: "{{ cluster_name }}-backend"
+      tls:
+        passthrough: true
+      entryPoints:
+        - "k8s-api"
+
+  services:
+    {{ cluster_name }}-backend:
+      loadBalancer:
+        servers:
+{% for node in control_plane_nodes %}
+          - address: "{{ hostvars[node]['ansible_default_ipv4']['address'] }}:{{ cluster_api_port }}"
+{% endfor %}
+        healthCheck:
+          path: "/healthz"
+          interval: "10s"
+          timeout: "3s"