Include tables.conf in /etc/pf.conf (file that will include all the pf configuration)

Include router.conf in /etc/pf.conf so pf can read the config

provision roles/router/pf/files/pf.conf as /etc/pf.conf.d/router.conf

When router-002 takes over, the default route changes as expected.

However, after the default route was changed, complector could no longer reach the Internet (e.g. ping 8.8.8.8).

After testing Complector with OSPF enabled to receive the default route, it works as expected.

Finally check after T2319 :

@dereckson While testing and modifying the GRE tunnel, it took so long on Ysul that SSH stopped responding, and we lost access to the machine.

Now, regardless of whether router-002 or router-003 is the primary router, the tunnel with Windriver works perfectly. However, there is still an issue with Ysul: the tunnel works when router-003 is primary, but it does not work when router-002 is primary.

Changed the file tunnels.sls : create tunnels on routers and after on clients (windriver and ysul)

Changed the interface name from windriver to primary router (gre1 instead of gre2)

Little change of a log : log(f"Sending Salt event: network/carp/primary {payload}") (no more carp/master)

Fix the tag of the event to network/carp/primary

Modified send_salt_event to use the full salt-call path :

I created and tested a Salt reactor that listens for the carp/master event sent by the routers. For now, the reactor only runs a test command on Ysul and Windriver to confirm that the event is correctly received and that the master can trigger actions on those hosts.

For T2319, I added a function to send event to Salt master.

Test to validate Salt event emission and reception on the master :

@dereckson Works good, thank you !

Use "/me" endpoint instead of "me", which caused an ERROR: 'nichandle'.

This explanation is not fully correct. Indeed the VIP cannot be used to establish two GRE tunnels at the same time on Windriver or on Ysul.

This issue is indeed not longer relevant.

This review is replaced by D4093 so I will abandon it !