haproxy.yml

@@ -2,6 +2,5 @@
 # file: haproxy.yml
 
 - hosts: haproxy
-  become: true
   roles:
     - haproxy

roles/haproxy/tasks/main.yml

@@ -7,6 +7,7 @@
       - policycoreutils-python-utils
       - NetworkManager
     state: latest
+  become: yes
 
 - name: Install packages
   package:
@@ -15,6 +16,7 @@
       - haproxy
       - firewalld
     state: latest
+  become: yes
 
 - name: Add VLAN
   nmcli:
@@ -25,6 +27,7 @@
     autoconnect: yes
     type: vlan
     state: present
+  become: yes
   when: (haproxy_keepalived_adapter_vlan is defined) and (haproxy_keepalived_ip is defined)
 
 - name: Enable firewall rule for vrrp
@@ -34,6 +37,7 @@
     state: enabled
     immediate: yes
   notify: reload firewalld
+  become: yes
 
 - name: Allow binding non-local IP
   sysctl:
@@ -41,6 +45,7 @@
     value: "1"
     reload: true
     state: present
+  become: yes
 
 - name: Allow binding ip forward
   sysctl:
@@ -48,18 +53,21 @@
     value: "1"
     reload: true
     state: present
+  become: yes
 
 - name: Update keepalived configuration
   template:
     src: keepalived.conf.j2
     dest: /etc/keepalived/keepalived.conf
   notify: reload keepalived
+  become: yes 
 
 - name: Enable keepalived
   service: 
     name: keepalived
     state: started
     enabled: yes
+  become: yes
 
 - name: Limit SSH to only ansible_host
   lineinfile:
@@ -68,6 +76,7 @@
     line: "ListenAddress {{ ansible_host }}"
   notify:
     - Restart SSH
+  become: yes
 
 - name: Flush handlers
   meta: flush_handlers
@@ -77,20 +86,7 @@
     name: haproxy_connect_any
     state: yes
     persistent: yes
-
-- name: Ensure maps directory exists
-  file: 
-    path: "/etc/haproxy/maps" 
-    state: directory
-
-- name: Deploy map files
-  copy:
-    src: "{{ item }}"
-    dest: /etc/haproxy/maps
-    mode: 0644
-  with_fileglob:
-    - "maps/*"
-  notify: reload haproxy
+  become: yes
 
 - name: Update HAProxy configuration
   template:
@@ -99,12 +95,14 @@
     mode: 0644
     validate: haproxy -f %s -c -q
   notify: reload haproxy
+  become: yes 
 
 - name: Ensure HAProxy is started and enabled on boot.
   service: 
     name: haproxy 
     state: started
     enabled: yes
+  become: yes
 
 - name: Enable firewall ports for haproxy
   firewalld:
@@ -114,9 +112,11 @@
     state: enabled
   loop: "{{ haproxy_listen_ports }}"
   notify: reload firewalld
+  become: yes
 
 - name: Enable firewalld
   service: 
     name: firewalld
     state: started
     enabled: yes
+  become: yes