forked from jakub/ansible
Update mikrotikbackup_clean.yml
This commit is contained in:
@@ -21,27 +21,27 @@
|
|||||||
tags: always
|
tags: always
|
||||||
|
|
||||||
- name: Parse router name
|
- name: Parse router name
|
||||||
ansible.builtin.set_fact:
|
set_fact:
|
||||||
router_name: "{{ identity_raw.stdout[0].split(': ')[1] | trim }}"
|
router_name: "{{ identity_raw.stdout[0].split(': ')[1] | trim }}"
|
||||||
tags: always
|
tags: always
|
||||||
|
|
||||||
- name: Get timestamp
|
- name: Get timestamp
|
||||||
ansible.builtin.command: date +%Y-%m-%d_%H-%M-%S
|
command: date +%Y-%m-%d_%H-%M-%S
|
||||||
register: date_out
|
register: date_out
|
||||||
delegate_to: localhost
|
delegate_to: localhost
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags: always
|
tags: always
|
||||||
|
|
||||||
- name: Set timestamp fact
|
- name: Set timestamp fact
|
||||||
ansible.builtin.set_fact:
|
set_fact:
|
||||||
ts: "{{ date_out.stdout }}"
|
ts: "{{ date_out.stdout }}"
|
||||||
tags: always
|
tags: always
|
||||||
|
|
||||||
# ----------------------------
|
# ----------------------------
|
||||||
# Backup (tag: backup)
|
# Backup
|
||||||
# ----------------------------
|
# ----------------------------
|
||||||
- name: Ensure local backup directory exists
|
- name: Ensure local backup directory exists
|
||||||
ansible.builtin.file:
|
file:
|
||||||
path: "{{ backup_dir }}"
|
path: "{{ backup_dir }}"
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
@@ -55,7 +55,7 @@
|
|||||||
tags: backup
|
tags: backup
|
||||||
|
|
||||||
- name: Save export locally
|
- name: Save export locally
|
||||||
ansible.builtin.copy:
|
copy:
|
||||||
content: "{{ export_cfg.stdout[0] }}"
|
content: "{{ export_cfg.stdout[0] }}"
|
||||||
dest: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc"
|
dest: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc"
|
||||||
mode: "0600"
|
mode: "0600"
|
||||||
@@ -63,42 +63,53 @@
|
|||||||
tags: backup
|
tags: backup
|
||||||
|
|
||||||
- name: Mark backup success
|
- name: Mark backup success
|
||||||
ansible.builtin.set_fact:
|
set_fact:
|
||||||
backup_ok: true
|
backup_ok: true
|
||||||
backup_file: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc"
|
backup_file: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc"
|
||||||
tags: backup
|
tags: backup
|
||||||
|
|
||||||
# ----------------------------
|
# ----------------------------
|
||||||
# Upgrade (tag: upgrade)
|
# Upgrade
|
||||||
# ----------------------------
|
# ----------------------------
|
||||||
- name: Check current and latest available package versions
|
- name: Check updates (try structured output)
|
||||||
|
community.routeros.command:
|
||||||
|
commands: /system package update check-for-updates once as-value
|
||||||
|
register: update_check_struct
|
||||||
|
ignore_errors: true
|
||||||
|
tags: upgrade
|
||||||
|
|
||||||
|
- name: Fallback to plain output if structured failed
|
||||||
community.routeros.command:
|
community.routeros.command:
|
||||||
commands: /system package update check-for-updates
|
commands: /system package update check-for-updates
|
||||||
register: update_check
|
register: update_check_plain
|
||||||
|
when: update_check_struct is failed
|
||||||
tags: upgrade
|
tags: upgrade
|
||||||
|
|
||||||
- name: Parse installed and latest versions
|
# ----------------------------
|
||||||
ansible.builtin.set_fact:
|
# Parse versions (structured)
|
||||||
installed_version: >-
|
# ----------------------------
|
||||||
{{
|
- name: Parse versions from structured output
|
||||||
(
|
set_fact:
|
||||||
update_check.stdout[0]
|
installed_version: "{{ update_check_struct.stdout[0]['installed-version'] | default('unknown') }}"
|
||||||
| regex_search('installed-version: ([^\\s]+)', '\\1')
|
latest_version: "{{ update_check_struct.stdout[0]['latest-version'] | default('unknown') }}"
|
||||||
| default([])
|
when: update_check_struct is succeeded
|
||||||
) | first | default('unknown')
|
|
||||||
}}
|
|
||||||
latest_version: >-
|
|
||||||
{{
|
|
||||||
(
|
|
||||||
update_check.stdout[0]
|
|
||||||
| regex_search('latest-version: ([^\\s]+)', '\\1')
|
|
||||||
| default([])
|
|
||||||
) | first | default('unknown')
|
|
||||||
}}
|
|
||||||
tags: upgrade
|
tags: upgrade
|
||||||
|
|
||||||
|
# ----------------------------
|
||||||
|
# Parse versions (fallback regex)
|
||||||
|
# ----------------------------
|
||||||
|
- name: Parse versions from plain output
|
||||||
|
set_fact:
|
||||||
|
installed_version: "{{ update_check_plain.stdout[0] | regex_search('installed-version: ([^\\s]+)', '\\1') | default('unknown', true) }}"
|
||||||
|
latest_version: "{{ update_check_plain.stdout[0] | regex_search('latest-version: ([^\\s]+)', '\\1') | default('unknown', true) }}"
|
||||||
|
when: update_check_struct is failed
|
||||||
|
tags: upgrade
|
||||||
|
|
||||||
|
# ----------------------------
|
||||||
|
# Decide upgrade
|
||||||
|
# ----------------------------
|
||||||
- name: Set upgrade-needed fact
|
- name: Set upgrade-needed fact
|
||||||
ansible.builtin.set_fact:
|
set_fact:
|
||||||
upgrade_needed: >-
|
upgrade_needed: >-
|
||||||
{{
|
{{
|
||||||
installed_version != 'unknown'
|
installed_version != 'unknown'
|
||||||
@@ -107,21 +118,29 @@
|
|||||||
}}
|
}}
|
||||||
tags: upgrade
|
tags: upgrade
|
||||||
|
|
||||||
- name: Skip upgrade if already on latest
|
- name: Show decision
|
||||||
ansible.builtin.debug:
|
debug:
|
||||||
msg: "Router {{ router_name }} is already on latest version {{ installed_version }}. Skipping upgrade."
|
msg: "Router={{ router_name }} installed={{ installed_version }} latest={{ latest_version }} upgrade_needed={{ upgrade_needed }}"
|
||||||
|
tags: upgrade
|
||||||
|
|
||||||
|
- name: Skip upgrade if already latest
|
||||||
|
debug:
|
||||||
|
msg: "Router {{ router_name }} is already up to date ({{ installed_version }})"
|
||||||
when: not upgrade_needed
|
when: not upgrade_needed
|
||||||
tags: upgrade
|
tags: upgrade
|
||||||
|
|
||||||
- name: Trigger package download and install
|
# ----------------------------
|
||||||
|
# Perform upgrade
|
||||||
|
# ----------------------------
|
||||||
|
- name: Trigger package install
|
||||||
community.routeros.command:
|
community.routeros.command:
|
||||||
commands: /system package update install
|
commands: /system package update install
|
||||||
register: upgrade_result
|
register: upgrade_result
|
||||||
when: upgrade_needed
|
when: upgrade_needed
|
||||||
tags: upgrade
|
tags: upgrade
|
||||||
|
|
||||||
- name: Wait for router to come back online after reboot
|
- name: Wait for router to come back
|
||||||
ansible.builtin.wait_for_connection:
|
wait_for_connection:
|
||||||
delay: 180
|
delay: 180
|
||||||
timeout: 600
|
timeout: 600
|
||||||
sleep: 10
|
sleep: 10
|
||||||
@@ -138,29 +157,22 @@
|
|||||||
tags: upgrade
|
tags: upgrade
|
||||||
|
|
||||||
- name: Parse post-upgrade version
|
- name: Parse post-upgrade version
|
||||||
ansible.builtin.set_fact:
|
set_fact:
|
||||||
post_upgrade_version: >-
|
post_upgrade_version: "{{ post_upgrade_info.stdout[0] | regex_search('version: ([^\\s]+)', '\\1') | default('unknown', true) }}"
|
||||||
{{
|
|
||||||
(
|
|
||||||
post_upgrade_info.stdout[0]
|
|
||||||
| regex_search('version: ([^\\s]+)', '\\1')
|
|
||||||
| default([])
|
|
||||||
) | first | default('unknown')
|
|
||||||
}}
|
|
||||||
when: upgrade_needed
|
when: upgrade_needed
|
||||||
tags: upgrade
|
tags: upgrade
|
||||||
|
|
||||||
- name: Show post-upgrade RouterOS version
|
- name: Show post-upgrade version
|
||||||
ansible.builtin.debug:
|
debug:
|
||||||
msg: "Router {{ router_name }} upgraded to version {{ post_upgrade_version }}"
|
msg: "Router {{ router_name }} upgraded to {{ post_upgrade_version }}"
|
||||||
when: upgrade_needed
|
when: upgrade_needed
|
||||||
tags: upgrade
|
tags: upgrade
|
||||||
|
|
||||||
# ----------------------------
|
# ----------------------------
|
||||||
# Build Checkmk status
|
# Build Checkmk result
|
||||||
# ----------------------------
|
# ----------------------------
|
||||||
- name: Build Checkmk result when no upgrade was needed
|
- name: Result when no upgrade
|
||||||
ansible.builtin.set_fact:
|
set_fact:
|
||||||
cmk_state: 0
|
cmk_state: 0
|
||||||
cmk_output: >-
|
cmk_output: >-
|
||||||
OK - router={{ router_name }}
|
OK - router={{ router_name }}
|
||||||
@@ -173,8 +185,8 @@
|
|||||||
when: not upgrade_needed
|
when: not upgrade_needed
|
||||||
tags: always
|
tags: always
|
||||||
|
|
||||||
- name: Build Checkmk result when upgrade succeeded
|
- name: Result when upgrade happened
|
||||||
ansible.builtin.set_fact:
|
set_fact:
|
||||||
cmk_state: "{{ 0 if post_upgrade_version == latest_version else 2 }}"
|
cmk_state: "{{ 0 if post_upgrade_version == latest_version else 2 }}"
|
||||||
cmk_output: >-
|
cmk_output: >-
|
||||||
{{ 'OK' if post_upgrade_version == latest_version else 'CRIT' }} -
|
{{ 'OK' if post_upgrade_version == latest_version else 'CRIT' }} -
|
||||||
@@ -190,11 +202,11 @@
|
|||||||
tags: always
|
tags: always
|
||||||
|
|
||||||
# ----------------------------
|
# ----------------------------
|
||||||
# Push result to Checkmk
|
# Send to Checkmk
|
||||||
# ----------------------------
|
# ----------------------------
|
||||||
- name: Send result to Checkmk
|
- name: Send result to Checkmk
|
||||||
delegate_to: localhost
|
delegate_to: localhost
|
||||||
ansible.builtin.uri:
|
uri:
|
||||||
url: "{{ checkmk_url }}"
|
url: "{{ checkmk_url }}"
|
||||||
method: POST
|
method: POST
|
||||||
headers:
|
headers:
|
||||||
@@ -208,15 +220,12 @@
|
|||||||
state: "{{ cmk_state | int }}"
|
state: "{{ cmk_state | int }}"
|
||||||
output: "{{ cmk_output }}"
|
output: "{{ cmk_output }}"
|
||||||
return_content: true
|
return_content: true
|
||||||
status_code:
|
status_code: [200, 201, 204]
|
||||||
- 200
|
|
||||||
- 201
|
|
||||||
- 204
|
|
||||||
register: checkmk_result
|
register: checkmk_result
|
||||||
failed_when: false
|
failed_when: false
|
||||||
tags: always
|
tags: always
|
||||||
|
|
||||||
- name: Show Checkmk response
|
- name: Show Checkmk response
|
||||||
ansible.builtin.debug:
|
debug:
|
||||||
var: checkmk_result
|
var: checkmk_result
|
||||||
tags: always
|
tags: always
|
||||||
Reference in New Issue
Block a user