diff --git a/scripts/keepalived.sh b/scripts/keepalived.sh
new file mode 100644
index 0000000..8669393
--- /dev/null
+++ b/scripts/keepalived.sh
@@ -0,0 +1,201 @@
+#!/bin/bash
+set -euo pipefail
+
+# 初始化变量
+ACTION=""
+VIP=""
+PRIORITY=150
+INTERFACE=""
+KEEPALIVED_CONF="/etc/keepalived/keepalived.conf"
+CHECK_SCRIPT="/usr/local/bin/check_haproxy.sh"
+
+# 打印帮助信息
+usage() {
+    echo "用法: $0 [操作] [选项]"
+    echo "操作:"
+    echo "  --install   安装并配置keepalived"
+    echo "  --uninstall 卸载keepalived并清理配置"
+    echo "安装选项:"
+    echo "  --vip <VIP>          必选，虚拟IP（格式:192.168.1.100/24）"
+    echo "  --priority <数值>    可选，优先级（默认150，主节点设高）"
+    echo "示例:"
+    echo "  安装主节点: $0 --install --vip 192.168.1.100/24 --priority 150"
+    echo "  安装备节点: $0 --install --vip 192.168.1.100/24 --priority 140"
+    echo "  卸载: $0 --uninstall"
+    exit 1
+}
+
+# 解析参数
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        --install|--uninstall)
+            ACTION="$1"
+            shift
+            ;;
+        --vip)
+            VIP="$2"
+            shift 2
+            ;;
+        --priority)
+            PRIORITY="$2"
+            shift 2
+            ;;
+        *)
+            echo "错误：未知参数 $1"
+            usage
+            ;;
+    esac
+done
+
+# 校验操作参数
+if [[ -z "$ACTION" ]]; then
+    echo "错误：必须指定 --install 或 --uninstall"
+    usage
+fi
+
+# 检查root权限
+if [[ $EUID -ne 0 ]]; then
+    echo "错误：脚本必须以root权限运行（使用sudo）"
+    exit 1
+fi
+
+# 获取默认网卡
+get_default_interface() {
+    INTERFACE=$(ip -br link show | grep -v LOOPBACK | awk '{print $1}' | head -n 1)
+    if [[ -z "$INTERFACE" ]]; then
+        echo "错误：无法获取默认网卡，请手动检查网络接口"
+        exit 1
+    fi
+    echo "使用默认网卡：$INTERFACE"
+}
+
+# 安装keepalived
+install_keepalived() {
+    # 校验安装参数
+    if [[ -z "$VIP" ]]; then
+        echo "错误：安装必须指定 --vip（格式:IP/子网掩码）"
+        usage
+    fi
+    if ! [[ "$VIP" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/[0-9]+$ ]]; then
+        echo "错误：VIP格式无效（正确格式：192.168.1.100/24）"
+        exit 1
+    fi
+
+    # 获取网卡
+    get_default_interface
+
+    # 安装软件
+    echo "===== 开始安装keepalived ====="
+    apt update >/dev/null
+    apt install -y keepalived >/dev/null || { echo "keepalived安装失败"; exit 1; }
+
+    # 备份原有配置（若存在）
+    if [[ -f "$KEEPALIVED_CONF" ]]; then
+        mv "$KEEPALIVED_CONF" "${KEEPALIVED_CONF}.bak.$(date +%F_%H%M%S)"
+        echo "已备份原有配置文件"
+    fi
+
+    # 创建健康检查脚本
+    echo "创建健康检查脚本..."
+    cat > "$CHECK_SCRIPT" << 'EOF'
+#!/bin/bash
+if ! pgrep -x "haproxy" >/dev/null; then
+    systemctl stop keepalived
+    exit 1
+else
+    exit 0
+fi
+EOF
+    chmod +x "$CHECK_SCRIPT"
+
+    # 生成配置文件
+    echo "生成keepalived配置..."
+    cat > "$KEEPALIVED_CONF" << EOF
+global_defs {
+    router_id LVS_K8S_$(hostname)
+}
+
+vrrp_script check_haproxy {
+    script "$CHECK_SCRIPT"
+    interval 2
+    weight -20
+}
+
+vrrp_instance VI_1 {
+    state $(if [[ $PRIORITY -ge 150 ]]; then echo "MASTER"; else echo "BACKUP"; fi)
+    interface $INTERFACE
+    virtual_router_id 51
+    priority $PRIORITY
+    advert_int 1
+    authentication {
+        auth_type PASS
+        auth_pass k8s_ha_auth_2024
+    }
+    virtual_ipaddress {
+        $VIP
+    }
+    track_script {
+        check_haproxy
+    }
+}
+EOF
+
+    # 启动服务
+    systemctl enable --now keepalived
+    if systemctl is-active --quiet keepalived; then
+        echo "===== keepalived安装完成 ====="
+        echo "VIP：$VIP"
+        echo "优先级：$PRIORITY"
+        echo "网卡：$INTERFACE"
+    else
+        echo "错误：keepalived启动失败，请查看日志 journalctl -u keepalived"
+        exit 1
+    fi
+}
+
+# 卸载keepalived
+uninstall_keepalived() {
+    echo "===== 开始卸载keepalived ====="
+
+    # 停止服务
+    if systemctl is-active --quiet keepalived; then
+        systemctl stop keepalived
+        echo "已停止keepalived服务"
+    fi
+
+    # 卸载软件
+    if dpkg -l keepalived &>/dev/null; then
+        apt purge -y keepalived >/dev/null
+        apt autoremove -y >/dev/null
+        echo "已卸载keepalived软件包"
+    else
+        echo "keepalived未安装，跳过卸载"
+    fi
+
+    # 清理配置文件（保留备份提示）
+    if [[ -d /etc/keepalived/ ]]; then
+        mv /etc/keepalived/ "/etc/keepalived.bak.$(date +%F_%H%M%S)"
+        echo "配置文件已备份至 /etc/keepalived.bak.xxx"
+    fi
+
+    # 清理健康检查脚本
+    if [[ -f "$CHECK_SCRIPT" ]]; then
+        rm -f "$CHECK_SCRIPT"
+        echo "已删除健康检查脚本"
+    fi
+
+    echo "===== keepalived卸载完成 ====="
+}
+
+# 执行操作
+case "$ACTION" in
+    --install)
+        install_keepalived
+        ;;
+    --uninstall)
+        uninstall_keepalived
+        ;;
+    *)
+        usage
+        ;;
+esac
\ No newline at end of file