257 lines
7.4 KiB
YAML
257 lines
7.4 KiB
YAML
---
|
|
- name: Backup and/or Upgrade MikroTik
|
|
hosts: mikrotik_routers
|
|
gather_facts: no
|
|
serial: 10
|
|
|
|
vars:
|
|
backup_dir: /opt/mikrotik_backups/
|
|
checkmk_url: "http://checkmk-server/mysite/check_mk/api/1.0/domain-types/service/collections/all"
|
|
checkmk_service_description: "MikroTik Backup/Upgrade"
|
|
|
|
tasks:
|
|
|
|
# ----------------------------
|
|
# Always: identity + timestamp
|
|
# ----------------------------
|
|
- name: Get router identity
|
|
community.routeros.command:
|
|
commands: /system identity print
|
|
register: identity_raw
|
|
tags: always
|
|
|
|
- name: Parse router name
|
|
ansible.builtin.set_fact:
|
|
router_name: "{{ identity_raw.stdout[0].split(': ')[1] | trim }}"
|
|
tags: always
|
|
|
|
- name: Get timestamp
|
|
ansible.builtin.command: date +%Y-%m-%d_%H-%M-%S
|
|
register: date_out
|
|
delegate_to: localhost
|
|
changed_when: false
|
|
tags: always
|
|
|
|
- name: Set timestamp fact
|
|
ansible.builtin.set_fact:
|
|
ts: "{{ date_out.stdout }}"
|
|
tags: always
|
|
|
|
# ----------------------------
|
|
# Backup
|
|
# ----------------------------
|
|
- name: Ensure local backup directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ backup_dir }}"
|
|
state: directory
|
|
mode: "0755"
|
|
delegate_to: localhost
|
|
tags: backup
|
|
|
|
- name: Export router config
|
|
community.routeros.command:
|
|
commands: /export terse show-sensitive
|
|
register: export_cfg
|
|
tags: backup
|
|
|
|
- name: Save export locally
|
|
ansible.builtin.copy:
|
|
content: "{{ export_cfg.stdout[0] }}"
|
|
dest: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc"
|
|
mode: "0600"
|
|
delegate_to: localhost
|
|
tags: backup
|
|
|
|
- name: Mark backup success
|
|
ansible.builtin.set_fact:
|
|
backup_file: "{{ backup_dir }}/{{ router_name }}-{{ ts }}.rsc"
|
|
tags: backup
|
|
|
|
# ----------------------------
|
|
# Upgrade
|
|
# ----------------------------
|
|
- name: Trigger update check
|
|
community.routeros.command:
|
|
commands: /system package update check-for-updates once
|
|
tags: upgrade
|
|
|
|
- name: Wait for MikroTik update check
|
|
ansible.builtin.pause:
|
|
seconds: 5
|
|
tags: upgrade
|
|
|
|
- name: Get update info
|
|
community.routeros.command:
|
|
commands: /system package update print
|
|
register: update_info
|
|
tags: upgrade
|
|
|
|
# ----------------------------
|
|
# SAFE parsing (final)
|
|
# ----------------------------
|
|
- name: Parse versions safely
|
|
ansible.builtin.set_fact:
|
|
installed_version: >-
|
|
{{
|
|
(update_info.stdout[0]
|
|
| regex_search('installed-version: ([^\\s]+)')
|
|
| default('installed-version: unknown'))
|
|
| regex_replace('installed-version: ', '')
|
|
| trim
|
|
}}
|
|
latest_version: >-
|
|
{{
|
|
(update_info.stdout[0]
|
|
| regex_search('latest-version: ([^\\s]+)')
|
|
| default('latest-version: unknown'))
|
|
| regex_replace('latest-version: ', '')
|
|
| trim
|
|
}}
|
|
update_status: >-
|
|
{{
|
|
(update_info.stdout[0]
|
|
| regex_search('status: (.+)')
|
|
| default('status: unknown'))
|
|
| regex_replace('status: ', '')
|
|
| trim
|
|
}}
|
|
update_channel: >-
|
|
{{
|
|
(update_info.stdout[0]
|
|
| regex_search('channel: ([^\\s]+)')
|
|
| default('channel: unknown'))
|
|
| regex_replace('channel: ', '')
|
|
| trim
|
|
}}
|
|
tags: upgrade
|
|
|
|
- name: Debug parsed values
|
|
ansible.builtin.debug:
|
|
msg: >
|
|
router={{ router_name }}
|
|
channel={{ update_channel }}
|
|
installed={{ installed_version }}
|
|
latest={{ latest_version }}
|
|
status={{ update_status }}
|
|
tags: upgrade
|
|
|
|
# ----------------------------
|
|
# Logic
|
|
# ----------------------------
|
|
- name: Detect update failure
|
|
ansible.builtin.set_fact:
|
|
update_failed: "{{ 'error' in (update_status | lower) or 'failed' in (update_status | lower) }}"
|
|
tags: upgrade
|
|
|
|
- name: Decide upgrade
|
|
ansible.builtin.set_fact:
|
|
upgrade_needed: >-
|
|
{{
|
|
not update_failed and
|
|
installed_version != 'unknown' and
|
|
latest_version != 'unknown' and
|
|
installed_version != latest_version
|
|
}}
|
|
tags: upgrade
|
|
|
|
- name: Show decision
|
|
ansible.builtin.debug:
|
|
msg: "Router={{ router_name }} installed={{ installed_version }} latest={{ latest_version }} upgrade_needed={{ upgrade_needed }}"
|
|
tags: upgrade
|
|
|
|
- name: Skip upgrade
|
|
ansible.builtin.debug:
|
|
msg: "Router {{ router_name }} is already up to date ({{ installed_version }})"
|
|
when: not upgrade_needed
|
|
tags: upgrade
|
|
|
|
# ----------------------------
|
|
# Upgrade execution
|
|
# ----------------------------
|
|
- name: Install update
|
|
community.routeros.command:
|
|
commands: /system package update install
|
|
when: upgrade_needed
|
|
register: upgrade_result
|
|
tags: upgrade
|
|
|
|
- name: Wait for reboot
|
|
ansible.builtin.wait_for_connection:
|
|
delay: 180
|
|
timeout: 600
|
|
sleep: 10
|
|
when:
|
|
- upgrade_needed
|
|
- upgrade_result is succeeded
|
|
tags: upgrade
|
|
|
|
- name: Confirm version
|
|
community.routeros.command:
|
|
commands: /system resource print
|
|
register: post_upgrade_info
|
|
when: upgrade_needed
|
|
tags: upgrade
|
|
|
|
- name: Parse new version
|
|
ansible.builtin.set_fact:
|
|
post_upgrade_version: >-
|
|
{{
|
|
(post_upgrade_info.stdout[0]
|
|
| regex_search('version: ([^\\s]+)')
|
|
| default('version: unknown'))
|
|
| regex_replace('version: ', '')
|
|
| trim
|
|
}}
|
|
when: upgrade_needed
|
|
tags: upgrade
|
|
|
|
# ----------------------------
|
|
# Checkmk result
|
|
# ----------------------------
|
|
- name: Result when no upgrade
|
|
ansible.builtin.set_fact:
|
|
cmk_state: "{{ 2 if update_failed else 0 }}"
|
|
cmk_output: >-
|
|
{{ 'CRIT' if update_failed else 'OK' }} -
|
|
router={{ router_name }}
|
|
installed={{ installed_version }}
|
|
latest={{ latest_version }}
|
|
status="{{ update_status }}"
|
|
upgrade_needed=no
|
|
when: not upgrade_needed
|
|
tags: always
|
|
|
|
- name: Result when upgrade happened
|
|
ansible.builtin.set_fact:
|
|
cmk_state: "{{ 0 if post_upgrade_version == latest_version else 2 }}"
|
|
cmk_output: >-
|
|
{{ 'OK' if post_upgrade_version == latest_version else 'CRIT' }} -
|
|
router={{ router_name }}
|
|
upgraded_to={{ post_upgrade_version }}
|
|
when: upgrade_needed
|
|
tags: always
|
|
|
|
# ----------------------------
|
|
# Send to Checkmk
|
|
# ----------------------------
|
|
- name: Send to Checkmk
|
|
delegate_to: localhost
|
|
ansible.builtin.uri:
|
|
url: "{{ checkmk_url }}"
|
|
method: POST
|
|
headers:
|
|
Authorization: "Bearer {{ lookup('env', 'CHECKMK_TOKEN') }}"
|
|
Content-Type: "application/json"
|
|
body_format: json
|
|
body:
|
|
host_name: "{{ router_name }}"
|
|
service_description: "{{ checkmk_service_description }}"
|
|
state: "{{ cmk_state | int }}"
|
|
output: "{{ cmk_output }}"
|
|
failed_when: false
|
|
tags: always
|
|
|
|
- name: Show Checkmk response
|
|
ansible.builtin.debug:
|
|
var: cmk_output
|
|
tags: always |