57 lines
2.2 KiB
Markdown
57 lines
2.2 KiB
Markdown
# Ansible-MariaDB-Cluster
|
|
|
|
Ansible playbook that provisions a group of servers to run mariadb as a Galera Cluster.
|
|
|
|
## Requirements
|
|
|
|
If you are using HaProxy as a front end to the cluster **without SSL**, you will need to create a user for the health checks to work properly. The user does not need to be able to access any databases, it just needs to be able to authenticate against the server.
|
|
|
|
```sql
|
|
CREATE USER 'haproxy_check'@'10.10.10.253' WITH MAX_QUERIES_PER_HOUR 1 MAX_UPDATES_PER_HOUR 0 MAX_STATEMENT_TIME 0.0000000001;
|
|
```
|
|
|
|
If you are using HaProxy as a front end to the cluster **with SSL**, use default tcp checks to validate the service is available as HaProxy does not support the SSL settings for mysql.
|
|
|
|
If this is the first install, the `mariadb_cluster_bootstrap` variable will need to be set to true to bootstrap the cluster.
|
|
|
|
## Variables
|
|
|
|
| Variable | Required | Default | Description |
|
|
| ---------------------------------- | -------- | ---------------- | -------------------------------------------------------------------------------------------------------------------- |
|
|
| mariadb_cluster_wsrep_cluster_name | yes | my_wsrep_cluster | The wsrep cluster name that should be used for the galera cluster |
|
|
| mariadb_cluster_access_ip | no | "" | If defined, the normal database port (3306) will only be accessible from the defined IP for use with a load balancer |
|
|
|
|
## Example
|
|
|
|
```yml
|
|
---
|
|
# file: hosts
|
|
|
|
mariadb_cluster:
|
|
hosts:
|
|
db01:
|
|
ansible_host: 10.10.10.11
|
|
db02:
|
|
ansible_host: 10.10.10.12
|
|
|
|
vars:
|
|
mariadb_cluster_wsrep_cluster_name: "CustomCluster1"
|
|
mariadb_cluster_access_ip: "10.10.10.253"
|
|
ansible_user: ansible
|
|
|
|
```
|
|
|
|
## Troubleshooting
|
|
|
|
You can view the status of the cluster by running the following command.
|
|
|
|
```sql
|
|
SHOW GLOBAL STATUS LIKE 'wsrep_%';
|
|
SHOW GLOBAL VARIABLES LIKE 'have_ssl';
|
|
SHOW SESSION STATUS LIKE 'Ssl_cipher';
|
|
SHOW GLOBAL VARIABLES LIKE 'require_secure_transport';
|
|
```
|
|
|
|
## License
|
|
|
|
See LICENSE file for full license information.
|