OCF_HEARTBEAT_AWSVIP(7)

🦋 OCF_HEARTBEAT_AWSVIP(7) 🦋

okay so this is a page from the OCF resource agents manual set, and it's literally all about ocf_heartbeat_awsvip — bestie, we're doing cloud networking today 💅

---

✨ NAME ✨

ocf_heartbeat_awsvip — the Amazon AWS Secondary Private IP Address Resource Agent. yes. that's the whole name. it's giving "long title, big job" energy 👑

---

🎀 SYNOPSIS 🎀

awsvip [start | stop | monitor | migrate_to | migrate_from | meta-data |
       validate-all]

that's the vibe check: you hand it one of those actions and it does the thing ✨

---

🌸 DESCRIPTION 🌸

okay so real talk — this is a Resource Agent for Amazon AWS Secondary Private IP Addresses. it handles all that with awscli, no cap.

your credentials gotta be set up first, bestie: either run "aws configure", or use AWS Policies. pick your fighter 🫶

if you wanna know more about awscli (and honestly why wouldn't you), it's at https://aws.amazon.com/cli/ — go read, i'll wait 💖

also!! this resource agent can be configured for native migration if your cluster manager supports it. for Pacemaker specifically, the allow-migrate="true" meta attribute is what turns native migration on. iykyk 😌

---

💜 SUPPORTED PARAMETERS 💜

the full lineup, no skips, no skips, we're going through all of them:

• awscli — the command line tools for aws services. (optional, string, default "/usr/bin/aws")
• auth_type — the authentication type. set it to "key" for AccessKey and SecretAccessKey set via "aws configure", or "role" to use AWS Policies. (optional, string, default "key")
• profile — a valid AWS CLI profile name, see ~/.aws/config and 'aws configure'. (optional, string, default "default")
• secondary_private_ip — the reserved secondary private ip for your ec2 instance. this one's the main character, it's the only required one 👑 (unique, required, string, no default)
• region — the Region for the AWS resource. heads up, it's required for role-based authentication. (optional, string, no default)
• api_delay — a short delay between API calls, so you don't send those APIs off too quick, bestie, they need a second 🫠 (optional, integer, default 3)
• interface — the Name of the network interface, i.e. eth0. (optional, string, no default)
• curl_retries — how many curl retries happen before failing. (optional, integer, default 4)
• curl_sleep — the curl sleep between tries. (optional, integer, default 3)

---

🔥 SUPPORTED ACTIONS 🔥

this resource agent supports the following actions (operations), and here is every single one with its timeout tea ☕

• start — Starts the resource. Suggested minimum timeout: 30s.
• stop — Stops the resource. Suggested minimum timeout: 30s.
• monitor — Performs a detailed status check. Suggested minimum timeout: 30s. Suggested interval: 20s.
• migrate_to — Executes steps necessary for migrating the resource to the node. Suggested minimum timeout: 30s.
• migrate_from — Executes steps necessary for migrating the resource away from the node. Suggested minimum timeout: 30s.
• meta-data — Retrieves resource agent metadata (internal use only). Suggested minimum timeout: 5s.
• validate — Suggested minimum timeout: 10s.
• validate-all — Performs a validation of the resource configuration. Suggested minimum timeout: 10s.

---

🌈 EXAMPLE CRM SHELL 🌈

here's what it looks like when you set up an awsvip resource with the crm(8) shell — copy-paste queen behavior, honestly:

primitive p_awsvip ocf:heartbeat:awsvip \
  params \
    secondary_private_ip=string \
  meta allow-migrate="true" \
  op monitor timeout="30s" interval="20s" depth="0"

---

⭐ EXAMPLE PCS ⭐

and here's the same energy but with pcs(8) — pick whichever one your cluster's into 💖

pcs resource create p_awsvip ocf:heartbeat:awsvip \
  secondary_private_ip=string \
  op monitor timeout="30s" interval="20s" OCF_CHECK_LEVEL="0"

---

🧚 SEE ALSO 🧚

http://clusterlabs.org/ — go say hi to the clusterlabs fam, they're icons 💅

---

🍓 AUTHOR 🍓

ClusterLabs contributors — and yeah, if you're nosy about which individual authors, the resource agent source has all that tea in it 🙈

---

lowkey reminder bestie: secondary_private_ip is the one with no default and it's required & unique, so if things are being weird, start there 😭 also region is required for role-based auth — don't forget it, i'm begging 🫶

---

and that's the whole page!! mwah 💋

this little gem came from resource-agents UNKNOWN, dated 10/01/2026, and it lives under the name OCF_HEARTBEAT_AWSVIP(7) — slay, go configure your secondary private IPs, you're gonna do amazing ✨💖✨