jakub/ansible
1
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update mikrotikbackup_clean.yml

Browse Source
This commit is contained in:
jakub
2026-03-21 08:28:39 +00:00
parent 172d758bac
commit 2c61021830
1 changed files with 70 additions and 92 deletions
Download Patch File Download Diff File Expand all files Collapse all files

162
mikrotikbackup_clean.yml
View File

@@ -21,27 +21,27 @@
tags: always tags: always
- name: Parse router name - name: Parse router name
ansible.builtin.set_fact: set_fact:
router_name: "{{ identity_raw.stdout[0].split(': ')[1] | trim }}" router_name: "{{ identity_raw.stdout[0].split(': ')[1] | trim }}"
tags: always tags: always
- name: Get timestamp - name: Get timestamp
ansible.builtin.command: date +%Y-%m-%d_%H-%M-%S command: date +%Y-%m-%d_%H-%M-%S
register: date_out register: date_out
delegate_to: localhost delegate_to: localhost
changed_when: false changed_when: false
tags: always tags: always
- name: Set timestamp fact - name: Set timestamp
ansible.builtin.set_fact: set_fact:
ts: "{{ date_out.stdout }}" ts: "{{ date_out.stdout }}"
tags: always tags: always
# ---------------------------- # ----------------------------
# Backup (tag: backup) # Backup
# ---------------------------- # ----------------------------
- name: Ensure local backup directory exists - name: Ensure backup directory exists
ansible.builtin.file: file:
path: "{{ backup_dir }}" path: "{{ backup_dir }}"
state: directory state: directory
mode: "0755" mode: "0755"
@@ -55,7 +55,7 @@
tags: backup tags: backup
- name: Save export locally - name: Save export locally
ansible.builtin.copy: copy:
content: "{{ export_cfg.stdout[0] }}" content: "{{ export_cfg.stdout[0] }}"
dest: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc" dest: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc"
mode: "0600" mode: "0600"
@@ -63,89 +63,84 @@
tags: backup tags: backup
- name: Mark backup success - name: Mark backup success
ansible.builtin.set_fact: set_fact:
backup_ok: true
backup_file: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc" backup_file: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc"
tags: backup tags: backup
# ---------------------------- # ----------------------------
# Upgrade (tag: upgrade) # Upgrade
# ---------------------------- # ----------------------------
- name: Trigger update check - name: Trigger update check
community.routeros.command: community.routeros.command:
commands: /system package update check-for-updates once commands: /system package update check-for-updates once
tags: upgrade tags: upgrade
- name: Wait before reading update info - name: Wait for MikroTik update check
ansible.builtin.pause: pause:
seconds: 5 seconds: 5
tags: upgrade tags: upgrade
- name: Get update info (plain) - name: Get update info
community.routeros.command: community.routeros.command:
commands: /system package update print commands: /system package update print
register: update_info register: update_info
tags: upgrade tags: upgrade
# ---------------------------- # ----------------------------
# Parse versions (FIXED) # SAFE parsing (NO CRASH)
# ---------------------------- # ----------------------------
- name: Parse installed and latest versions - name: Parse versions safely
ansible.builtin.set_fact: set_fact:
installed_version: >- installed_version: >-
{{ {{
(update_info.stdout[0] (update_info.stdout[0]
| regex_search('installed-version: ([^\\s]+)', '\\1') | regex_search('installed-version: ([^\\s]+)')
| default(['unknown'], true)) | default('installed-version: unknown'))
| first | regex_replace('installed-version: ', '')
}} }}
latest_version: >- latest_version: >-
{{ {{
(update_info.stdout[0] (update_info.stdout[0]
| regex_search('latest-version: ([^\\s]+)', '\\1') | regex_search('latest-version: ([^\\s]+)')
| default(['unknown'], true)) | default('latest-version: unknown'))
| first | regex_replace('latest-version: ', '')
}} }}
update_status: >- update_status: >-
{{ {{
(update_info.stdout[0] (update_info.stdout[0]
| regex_search('status: (.+)', '\\1') | regex_search('status: (.+)')
| default(['unknown'], true)) | default('status: unknown'))
| first | regex_replace('status: ', '')
}} }}
update_channel: >- update_channel: >-
{{ {{
(update_info.stdout[0] (update_info.stdout[0]
| regex_search('channel: ([^\\s]+)', '\\1') | regex_search('channel: ([^\\s]+)')
| default(['unknown'], true)) | default('channel: unknown'))
| first | regex_replace('channel: ', '')
}} }}
tags: upgrade tags: upgrade
- name: Debug parsed update info - name: Debug parsed values
ansible.builtin.debug: debug:
msg: "Router={{ router_name }} channel={{ update_channel }} installed={{ installed_version }} latest={{ latest_version }} status={{ update_status }}" msg: >
router={{ router_name }}
channel={{ update_channel }}
installed={{ installed_version }}
latest={{ latest_version }}
status={{ update_status }}
tags: upgrade tags: upgrade
# ---------------------------- # ----------------------------
# Detect problems (FIXED) # Logic
# ---------------------------- # ----------------------------
- name: Detect update failure - name: Detect update failure
ansible.builtin.set_fact: set_fact:
update_failed: "{{ 'error' in (update_status | lower) or 'failed' in (update_status | lower) }}" update_failed: "{{ 'error' in (update_status | lower) or 'failed' in (update_status | lower) }}"
tags: upgrade tags: upgrade
- name: Warn if update failed - name: Decide upgrade
ansible.builtin.debug: set_fact:
msg: "WARNING: Update check failed on {{ router_name }} (status={{ update_status }})"
when: update_failed
tags: upgrade
# ----------------------------
# Decide upgrade
# ----------------------------
- name: Set upgrade-needed fact
ansible.builtin.set_fact:
upgrade_needed: >- upgrade_needed: >-
{{ {{
not update_failed and not update_failed and
@@ -156,28 +151,28 @@
tags: upgrade tags: upgrade
- name: Show decision - name: Show decision
ansible.builtin.debug: debug:
msg: "Router={{ router_name }} installed={{ installed_version }} latest={{ latest_version }} upgrade_needed={{ upgrade_needed }}" msg: "Router={{ router_name }} installed={{ installed_version }} latest={{ latest_version }} upgrade_needed={{ upgrade_needed }}"
tags: upgrade tags: upgrade
- name: Skip upgrade if already latest - name: Skip upgrade
ansible.builtin.debug: debug:
msg: "Router {{ router_name }} is already on latest version {{ installed_version }}" msg: "Router {{ router_name }} is already up to date ({{ installed_version }})"
when: not upgrade_needed when: not upgrade_needed
tags: upgrade tags: upgrade
# ---------------------------- # ----------------------------
# Perform upgrade # Upgrade
# ---------------------------- # ----------------------------
- name: Trigger package download and install - name: Install update
community.routeros.command: community.routeros.command:
commands: /system package update install commands: /system package update install
register: upgrade_result
when: upgrade_needed when: upgrade_needed
register: upgrade_result
tags: upgrade tags: upgrade
- name: Wait for router to come back online after reboot - name: Wait for reboot
ansible.builtin.wait_for_connection: wait_for_connection:
delay: 180 delay: 180
timeout: 600 timeout: 600
sleep: 10 sleep: 10
@@ -186,72 +181,61 @@
- upgrade_result is succeeded - upgrade_result is succeeded
tags: upgrade tags: upgrade
- name: Confirm upgraded version - name: Confirm version
community.routeros.command: community.routeros.command:
commands: /system resource print commands: /system resource print
register: post_upgrade_info register: post_upgrade_info
when: upgrade_needed when: upgrade_needed
tags: upgrade tags: upgrade
- name: Parse post-upgrade version - name: Parse new version
ansible.builtin.set_fact: set_fact:
post_upgrade_version: "{{ post_upgrade_info.stdout[0] | regex_search('version: ([^\\s]+)', '\\1') | default('unknown', true) }}" post_upgrade_version: >-
when: upgrade_needed {{
tags: upgrade (post_upgrade_info.stdout[0]
| regex_search('version: ([^\\s]+)')
- name: Show post-upgrade RouterOS version | default('version: unknown'))
ansible.builtin.debug: | regex_replace('version: ', '')
msg: "Router {{ router_name }} upgraded to version {{ post_upgrade_version }}" }}
when: upgrade_needed when: upgrade_needed
tags: upgrade tags: upgrade
# ---------------------------- # ----------------------------
# Build Checkmk status # Checkmk result
# ---------------------------- # ----------------------------
- name: Build Checkmk result when no upgrade was needed - name: Result when no upgrade
ansible.builtin.set_fact: set_fact:
cmk_state: "{{ 2 if update_failed else 0 }}" cmk_state: "{{ 2 if update_failed else 0 }}"
cmk_output: >- cmk_output: >-
{{ 'CRIT' if update_failed else 'OK' }} - {{ 'CRIT' if update_failed else 'OK' }} -
router={{ router_name }} router={{ router_name }}
backup=ok
installed={{ installed_version }} installed={{ installed_version }}
latest={{ latest_version }} latest={{ latest_version }}
status={{ update_status }} status="{{ update_status }}"
upgrade_needed=no upgrade_needed=no
backup_file={{ backup_file | default('n/a') }}
backup_ts={{ ts }}
when: not upgrade_needed when: not upgrade_needed
tags: always tags: always
- name: Build Checkmk result when upgrade succeeded - name: Result when upgrade happened
ansible.builtin.set_fact: set_fact:
cmk_state: "{{ 0 if post_upgrade_version == latest_version else 2 }}" cmk_state: "{{ 0 if post_upgrade_version == latest_version else 2 }}"
cmk_output: >- cmk_output: >-
{{ 'OK' if post_upgrade_version == latest_version else 'CRIT' }} - {{ 'OK' if post_upgrade_version == latest_version else 'CRIT' }} -
router={{ router_name }} router={{ router_name }}
backup=ok
installed_before={{ installed_version }}
latest={{ latest_version }}
status={{ update_status }}
upgrade_needed=yes
upgraded_to={{ post_upgrade_version }} upgraded_to={{ post_upgrade_version }}
backup_file={{ backup_file | default('n/a') }}
backup_ts={{ ts }}
when: upgrade_needed when: upgrade_needed
tags: always tags: always
# ---------------------------- # ----------------------------
# Push result to Checkmk # Send to Checkmk
# ---------------------------- # ----------------------------
- name: Send result to Checkmk - name: Send to Checkmk
delegate_to: localhost delegate_to: localhost
ansible.builtin.uri: uri:
url: "{{ checkmk_url }}" url: "{{ checkmk_url }}"
method: POST method: POST
headers: headers:
Authorization: "Bearer {{ lookup('env', 'CHECKMK_TOKEN') }}" Authorization: "Bearer {{ lookup('env', 'CHECKMK_TOKEN') }}"
Accept: "application/json"
Content-Type: "application/json" Content-Type: "application/json"
body_format: json body_format: json
body: body:
@@ -259,16 +243,10 @@
service_description: "{{ checkmk_service_description }}" service_description: "{{ checkmk_service_description }}"
state: "{{ cmk_state | int }}" state: "{{ cmk_state | int }}"
output: "{{ cmk_output }}" output: "{{ cmk_output }}"
return_content: true
status_code:
- 200
- 201
- 204
register: checkmk_result
failed_when: false failed_when: false
tags: always tags: always
- name: Show Checkmk response - name: Show Checkmk response
ansible.builtin.debug: debug:
var: checkmk_result var: cmk_output
tags: always tags: always