feat: 纳管共享 etcd 与 k3s 外 PostgreSQL 高可用及备份

2026-09-25 19:34:48 +00:00
parent acd4b55722
commit 3a2fe5fa0c
92 changed files with 4211 additions and 0 deletions
@@ -0,0 +1,20 @@
+---
+etcd_bao_url: https://bao.ad.ddupan.top:8200
+etcd_bao_pki_mount: pki
+etcd_bao_kv_mount: kv
+etcd_bao_secret_base: infra/etcd/consumers
+# 只在控制端使用，不下发 Bao token。也不读取或复制历史 .vault_pass。
+etcd_bao_token: "{{ lookup('env', 'BAO_TOKEN') }}"
+etcd_consumers:
+  - name: patroni-pg-prod
+    prefix: /homelab/patroni/pg-prod/
+etcd_lxc_template: laptop:vztmpl/ubuntu-24.04-standard_24.04-2_amd64.tar.zst
+etcd_lxc_storage: pve-rg
+etcd_lxc_bridge: labnet
+etcd_lxc_gateway: 10.60.0.1
+etcd_lxc_memory: 512
+etcd_lxc_disk_gb: 8
+etcd_lxc_pubkey: "{{ lookup('file', '~/.ssh/id_ed25519.pub') }}"
+
+# 与现有 LAN exporter 相同的内网采集边界；禁止映射到公网。
+etcd_metrics_urls: "http://127.0.0.1:2381,http://{{ etcd_address }}:2381"
@@ -0,0 +1,33 @@
+---
+# 已部署成员；共置 PG standby/备份的承载预算，数据库数据用独立 HDD mp0。
+all:
+  vars:
+    ansible_user: root
+  children:
+    etcd:
+      hosts:
+        etcd-laptop:
+          ansible_connection: local
+          ansible_host: 192.168.10.127
+          ansible_user: panxiao81
+          etcd_address: 192.168.10.127
+        etcd-pve1:
+          ansible_host: 10.60.0.20
+          etcd_address: 10.60.0.20
+        etcd-pve2:
+          ansible_host: 10.60.0.21
+          etcd_address: 10.60.0.21
+    etcd_pve:
+      hosts:
+        pve1:
+          ansible_host: 192.168.10.4
+          etcd_lxc_vmid: 150
+          etcd_lxc_hostname: etcd-pve1
+          etcd_lxc_address: 10.60.0.20/24
+          etcd_lxc_memory: 1536
+        pve2:
+          ansible_host: 192.168.10.7
+          etcd_lxc_vmid: 151
+          etcd_lxc_hostname: etcd-pve2
+          etcd_lxc_address: 10.60.0.21/24
+          etcd_lxc_memory: 768