SaltStack配置管理与数据系统

最新推荐文章于 2021-11-28 21:03:51 发布

凤箫声动.

最新推荐文章于 2021-11-28 21:03:51 发布

阅读量266

点赞数

分类专栏： saltstack 文章标签：运维

本文链接：https://blog.csdn.net/Yanghu4112/article/details/121099250

版权

saltstack 专栏收录该内容

6 篇文章 0 订阅

订阅专栏

环境

master	192.168.75.128
node1	192.168.75.150
node2	192.168.75.142
node3	192.168.75.143

YAML语言

YAML是一种直观的能够被电脑识别的数据序列化格式，是一个可读性高并且容易被人类阅读，容易和脚本语言交互，用来表达资料序列的编程语言。

它类似于标准通用标记语言的子集XML的数据描述语言，语法比XML简单很多。

YAML语言的格式如下：

house:
  family:
    name: Doe
    parents:
      - John
      - Jane
    children:
      - Paul
      - Mark
      - Simone
  address:
    number: 34
    street: Main Street
    city: Nowheretown
    zipcode: 12345

YAML的基本规则：

使用缩进来表示层级关系，每层2个空格，禁止使用TAB键
当冒号不是处于最后时，冒号后面必须有一个空格
用 - 表示列表，- 的后面必须有一个空格
用 # 表示注释

YAML配置文件要放到SaltStack让我们放的位置，可以在SaltStack的 Master 配置文件中查找file_roots即可看到。

[root@master ~]# vim /etc/salt/master
[root@master ~]# vim /etc/salt/master
...此处省略N行
file_roots:
  base:    //基础环境
    - /srv/salt/base
  test:    //测试环境
    - /srv/salt/test
  dev:    //开发环境
    - /srv/salt/dev
  prod:    //生产环境
    - /srv/salt/prod
...此处省略N行

[root@master ~]# mkdir -p /srv/salt/{base,test,dev,prod}
[root@master ~]# tree /srv/salt/
/srv/salt/
├── base
├── dev
├── prod
└── test

4 directories, 0 files
[root@master ~]# systemctl restart salt-master

需要注意：

base是默认的位置，如果file_roots只有一个，则base是必备的且必须叫base，不能改名

用SaltStack配置一个apache实例

在Master上部署sls配置文件并执行

环境部署

[root@master ~]# tree /srv/salt/
/srv/salt/
├── base
├── dev
├── prod
└── test

4 directories, 0 files
[root@master ~]# salt-key -L
Accepted Keys:
master
node1
node2
node3
Denied Keys:
Unaccepted Keys:
Rejected Keys:
[root@master ~]# salt '*' test.ping
node2:
    True
node1:
    True
master:
    True
node3:
    True
[root@master ~]#

实例：

//创建项目存放的目录
[root@master ~]# cd /srv/salt/base/
[root@master base]# ls
[root@master base]# mkdir -p web/apache
[root@master base]# tree web/
web/
└── apache

1 directory, 0 files
[root@master base]# 

//编写
[root@master base]# vim web/apache/install.sls
[root@master base]# cat web/apache/install.sls
apache-install:    //在YAML文件中全局唯一的ID
  pkg.install:     //用pkg.install下载apache
    - name: httpd  //要下载的服务名字

apache-service:    
  service.running: //用service.running模块来控制服务的启动状态
    - name: httpd
    - enable: true //设置开机自启

//启动
[root@master base]# salt 'node1' state.sls web.apache.install
node1:
----------
          ID: apache-install
    Function: pkg.installed
        Name: httpd
      Result: True
     Comment: All specified packages are already installed
     Started: 15:30:52.613334
    Duration: 515.583 ms
     Changes:   
----------
          ID: apache-service
    Function: service.running
        Name: httpd
      Result: True
     Comment: The service httpd is already running
     Started: 15:30:53.130985
    Duration: 30.315 ms
     Changes:   

Summary for node1
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time: 545.898 ms
[root@master base]# 

//在测试环境下也执行一下
[root@master test]# salt 'node2' state.sls web.apache.install saltenv=test //须指向test环境
node2:
----------
          ID: apache-install
    Function: pkg.installed
        Name: httpd
      Result: True
     Comment: All specified packages are already installed
     Started: 15:42:09.609740
    Duration: 640.168 ms
     Changes:   
----------
          ID: apache-service
    Function: service.running
        Name: httpd
      Result: True
     Comment: The service httpd is already running
     Started: 15:42:10.251822
    Duration: 39.733 ms
     Changes:   

Summary for node2
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time: 679.901 ms
[root@master test]#

在Minion上检查

//node1
[root@node1 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
   Active: active (running) since 二 2021-11-02 15:29:31 CST; 13min ago
     Docs: man:httpd(8)
           man:apachectl(8)
 Main PID: 41701 (httpd)
   Status: "Total requests: 0; Current requests/sec: 0; Current traffic:   0 B/sec"
   CGroup: /system.slice/httpd.service
           ├─41701 /usr/sbin/httpd -DFOREGROUND
           ├─42158 /usr/sbin/httpd -DFOREGROUND
           ├─42159 /usr/sbin/httpd -DFOREGROUND
           ├─42161 /usr/sbin/httpd -DFOREGROUND
           ├─42162 /usr/sbin/httpd -DFOREGROUND
           └─42163 /usr/sbin/httpd -DFOREGROUND

11月 02 15:29:06 node1 systemd[1]: Starting The Apache HTTP Se...
11月 02 15:29:21 node1 httpd[41701]: AH00558: httpd: Could not...
11月 02 15:29:31 node1 systemd[1]: Started The Apache HTTP Ser...
Hint: Some lines were ellipsized, use -l to show in full.
[root@node1 ~]# 

//node2
[root@node2 minion]# systemctl status httpd
● httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled>
   Active: active (running) since Tue 2021-11-02 15:36:16 CST; 7m>
     Docs: man:httpd.service(8)
 Main PID: 490328 (httpd)
   Status: "Running, listening on: port 80"
    Tasks: 213 (limit: 23789)
   Memory: 44.7M
   CGroup: /system.slice/httpd.service
           ├─490328 /usr/sbin/httpd -DFOREGROUND
           ├─491147 /usr/sbin/httpd -DFOREGROUND
           ├─491148 /usr/sbin/httpd -DFOREGROUND
           ├─491149 /usr/sbin/httpd -DFOREGROUND
           └─491150 /usr/sbin/httpd -DFOREGROUND

11月 02 15:35:57 node2 systemd[1]: Starting The Apache HTTP Serve>
11月 02 15:36:16 node2 httpd[490328]: AH00558: httpd: Could not r>
11月 02 15:36:16 node2 systemd[1]: Started The Apache HTTP Server.
11月 02 15:36:26 node2 httpd[490328]: Server configured, listenin>
[root@node2 minion]#

top file

op file介绍

直接通过命令执行sls文件时够自动化吗？答案是否定的，因为我们还要告诉某台主机要执行某个任务，自动化应该是我们让它干活时，它自己就知道哪台主机要干什么活，但是直接通过命令执行sls文件并不能达到这个目的，为了解决这个问题，top file 应运而生。

top file就是一个入口，top file的文件名可通过在 Master的配置文件中搜索top.sls找出，且此文件必须在 base 环境中，默认情况下此文件必须叫top.sls。

top file的作用就是告诉对应的主机要干什么活，比如让web服务器启动web服务，让数据库服务器安装mysql等等。

top file 实例：

//编写一个安装mariadb的yaml文件
[root@master base]# mkdir -p database/mariadb
[root@master base]# vim database/mariadb/install.sls
[root@master base]# cat database/mariadb/install.sls
mysql-install:
  pkg.installed:
    - name: mariadb-server

mysql-service:
  service.running:
    - name: mariadb
    - enable: ture
[root@master base]# salt 'node2' state.sls database.mariadb.install
node2:
----------
          ID: mysql-install
    Function: pkg.installed
        Name: mariadb-server
      Result: True
     Comment: All specified packages are already installed
     Started: 16:19:41.872158
    Duration: 647.731 ms
     Changes:   
----------
          ID: mysql-service
    Function: service.running
        Name: mariadb
      Result: True
     Comment: The service mariadb is already running
     Started: 16:19:42.521593
    Duration: 42.359 ms
     Changes:   

Summary for node2
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time: 690.090 ms

//在创建一个nginx并安装
[root@master base]# salt 'node2' state.sls database.mariadb.install
node2:
----------
          ID: mysql-install
    Function: pkg.installed
        Name: mariadb-server
      Result: True
     Comment: All specified packages are already installed
     Started: 16:19:41.872158
    Duration: 647.731 ms
     Changes:   
----------
          ID: mysql-service
    Function: service.running
        Name: mariadb
      Result: True
     Comment: The service mariadb is already running
     Started: 16:19:42.521593
    Duration: 42.359 ms
     Changes:   

Summary for node2
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time: 690.090 ms

//查看结构
[root@master base]# tree
.
├── database
│   └── mariadb
│       └── install.sls
└── web
    ├── apache
    │   └── install.sls
    └── nginx
        └── install.sls

//卸载node1 和 node2 上的apache和nginx
[root@node1 ~]# yum -y  remove httpd
[root@node2 ~]# yum -y remove nginx

//写高级状态的yml文件
[root@master base]# cat top.sls 
base:
  node2:
    - web.nginx.install    //在node2的基础环境下执行web/nginx/install.sls文件
  node1:
    - web.apache.install


//执行
[root@master base]# salt '*' state.highstate
node3:
----------
          ID: states
    Function: no.None
      Result: False
     Comment: No Top file or master_tops data matches found. Please see master log for details.
     Changes:   

Summary for node3
------------
Succeeded: 0
Failed:    1        //错误正常，因为文件里没有指定node3和master主机
------------
Total states run:     1
Total run time:   0.000 ms
master:
----------
          ID: states
    Function: no.None
      Result: False
     Comment: No Top file or master_tops data matches found. Please see master log for details.
     Changes:   

Summary for master
------------
Succeeded: 0
Failed:    1
------------
Total states run:     1
Total run time:   0.000 ms
node1:
----------
          ID: apache-install
    Function: pkg.installed
        Name: httpd
      Result: True
     Comment: All specified packages are already installed
     Started: 16:35:35.119041
    Duration: 596.08 ms
     Changes:   
----------
          ID: apache-service
    Function: service.running
        Name: httpd
      Result: True
     Comment: The service httpd is already running
     Started: 16:35:35.717178
    Duration: 37.481 ms
     Changes:   

Summary for node1
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time: 633.561 ms
node2:
----------
          ID: nginx-install
    Function: pkg.installed
        Name: nginx
      Result: True
     Comment: All specified packages are already installed
     Started: 16:35:35.145534
    Duration: 750.724 ms
     Changes:   
----------
          ID: nginx-service
    Function: service.running
        Name: nginx
      Result: True
     Comment: The service nginx is already running
     Started: 16:35:35.897906
    Duration: 43.669 ms
     Changes:   

Summary for node2
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time: 794.393 ms
ERROR: Minions returned with non-zero exit code
[root@master base]# 

//在node1和node2查看
[root@node1 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disabled)
   Active: active (running) since 二 2021-11-02 16:33:42 CST; 5min ago
     Docs: man:httpd(8)
           man:apachectl(8)
 Main PID: 70434 (httpd)
   Status: "Total requests: 0; Current requests/sec: 0; Current traffic:   0 B/sec"
   CGroup: /system.slice/httpd.service
           ├─70434 /usr/sbin/httpd -DFOREGROUND
           ├─70919 /usr/sbin/httpd -DFOREGROUND
           ├─70921 /usr/sbin/httpd -DFOREGROUND
           ├─70922 /usr/sbin/httpd -DFOREGROUND
           ├─70923 /usr/sbin/httpd -DFOREGROUND
           └─70924 /usr/sbin/httpd -DFOREGROUND

11月 02 16:33:15 node1 systemd[1]: Starting The Apache HTTP Se...
11月 02 16:33:31 node1 httpd[70434]: AH00558: httpd: Could not...
11月 02 16:33:42 node1 systemd[1]: Started The Apache HTTP Ser...
Hint: Some lines were ellipsized, use -l to show in full.
[root@node1 ~]# 

[root@node2 ~]# systemctl status nginx
● nginx.service - The nginx HTTP and reverse proxy server
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; disable>
   Active: active (running) since Tue 2021-11-02 16:32:34 CST; 7m>
  Process: 528204 ExecStart=/usr/sbin/nginx (code=exited, status=>
  Process: 528202 ExecStartPre=/usr/sbin/nginx -t (code=exited, s>
  Process: 528200 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (cod>
 Main PID: 528205 (nginx)
    Tasks: 5 (limit: 23789)
   Memory: 8.6M
   CGroup: /system.slice/nginx.service
           ├─528205 nginx: master process /usr/sbin/nginx
           ├─528206 nginx: worker process
           ├─528207 nginx: worker process
           ├─528208 nginx: worker process
           └─528209 nginx: worker process

11月 02 16:32:34 node2 systemd[1]: Starting The nginx HTTP and re>
11月 02 16:32:34 node2 nginx[528202]: nginx: the configuration fi>
11月 02 16:32:34 node2 nginx[528202]: nginx: configuration file />
11月 02 16:32:34 node2 systemd[1]: Started The nginx HTTP and rev>
[root@node2 ~]# 


//创建一个所有主机都执行的任务
[root@master base]# tree
.
├── database
│   └── mariadb
│       └── install.sls
├── top.sls
└── web
    ├── apache
    │   └── install.sls
    └── nginx
        └── install.sls

5 directories, 4 files
[root@master base]# vim top.sls 
[root@master base]# cat top.sls
base:
  '*':        //所有主机都会执行这个文件，安装mariadb
    - database.mariadb.install
  node2:
    - web.nginx.install
  node1:
    - web.apache.install

//执行（就不会向上方一样有feild）
[root@master base]# salt '*' state.highstate
node1:
----------
          ID: mysql-install
    Function: pkg.installed
        Name: mariadb-server
      Result: True
     Comment: All specified packages are already installed
     Started: 16:57:14.504140
    Duration: 891.232 ms
     Changes:   
----------
          ID: mysql-service
    Function: service.running
        Name: mariadb
      Result: True
     Comment: The service mariadb is already running
     Started: 16:57:15.399106
    Duration: 49.141 ms
     Changes:   
----------
          ID: apache-install
    Function: pkg.installed
        Name: httpd
      Result: True
     Comment: All specified packages are already installed
     Started: 16:57:15.448662
    Duration: 35.327 ms
     Changes:   
----------
          ID: apache-service
    Function: service.running
        Name: httpd
      Result: True
     Comment: The service httpd is already running
     Started: 16:57:15.484172
    Duration: 38.35 ms
     Changes:   

Summary for node1
------------
Succeeded: 4
Failed:    0
------------
Total states run:     4
Total run time:   1.014 s
node2:
----------
          ID: mysql-install
    Function: pkg.installed
        Name: mariadb-server
      Result: True
     Comment: All specified packages are already installed
     Started: 16:57:14.567072
    Duration: 1138.299 ms
     Changes:   
----------
          ID: mysql-service
    Function: service.running
        Name: mariadb
      Result: True
     Comment: The service mariadb is already running
     Started: 16:57:15.706923
    Duration: 66.631 ms
     Changes:   
----------
          ID: nginx-install
    Function: pkg.installed
        Name: nginx
      Result: True
     Comment: All specified packages are already installed
     Started: 16:57:15.773792
    Duration: 29.907 ms
     Changes:   
----------
          ID: nginx-service
    Function: service.running
        Name: nginx
      Result: True
     Comment: The service nginx is already running
     Started: 16:57:15.803861
    Duration: 45.728 ms
     Changes:   

Summary for node2
------------
Succeeded: 4
Failed:    0
------------
Total states run:     4
Total run time:   1.281 s
node3:
----------
          ID: mysql-install
    Function: pkg.installed
        Name: mariadb-server
      Result: True
     Comment: All specified packages are already installed
     Started: 16:57:15.037904
    Duration: 2030.522 ms
     Changes:   
----------
          ID: mysql-service
    Function: service.running
        Name: mariadb
      Result: True
     Comment: The service mariadb is already running
     Started: 16:57:17.070519
    Duration: 64.872 ms
     Changes:   

Summary for node3
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time:   2.095 s
master:
----------
          ID: mysql-install
    Function: pkg.installed
        Name: mariadb-server
      Result: True
     Comment: All specified packages are already installed
     Started: 16:57:15.252274
    Duration: 1966.778 ms
     Changes:   
----------
          ID: mysql-service
    Function: service.running
        Name: mariadb
      Result: True
     Comment: The service mariadb is already running
     Started: 16:57:17.220688
    Duration: 98.295 ms
     Changes:   

Summary for master
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time:   2.065 s
[root@master base]# 


//也可以指定某台主机运行任务
[root@master base]# salt 'node2' state.highstate         //单独指定node2主机干活
node2:
----------
          ID: mysql-install
    Function: pkg.installed
        Name: mariadb-server
      Result: True
     Comment: All specified packages are already installed
     Started: 16:59:28.731207
    Duration: 710.421 ms
     Changes:   
----------
          ID: mysql-service
    Function: service.running
        Name: mariadb
      Result: True
     Comment: The service mariadb is already running
     Started: 16:59:29.443087
    Duration: 44.493 ms
     Changes:   
----------
          ID: nginx-install
    Function: pkg.installed
        Name: nginx
      Result: True
     Comment: All specified packages are already installed
     Started: 16:59:29.487794
    Duration: 20.505 ms
     Changes:   
----------
          ID: nginx-service
    Function: service.running
        Name: nginx
      Result: True
     Comment: The service nginx is already running
     Started: 16:59:29.508448
    Duration: 34.587 ms
     Changes:   

Summary for node2
------------
Succeeded: 4
Failed:    0
------------
Total states run:     4
Total run time: 810.006 ms
[root@master base]#

SaltStack数据系统

SaltStack有两大数据系统，分别是：

Grains
PillarSaltStack数据系统组件

SaltStack数据系统组件

SaltStack组件之Grains

Grains是SaltStack的一个组件，其存放着minion启动时收集到的信息。

Grains是SaltStack组件中非常重要的组件之一，因为我们在做配置部署的过程中会经常使用它，Grains是SaltStack记录minion的一些静态信息的组件。可简单理解为Grains记录着每台minion的一些常用属性，比如CPU、内存、磁盘、网络信息等。我们可以通过grains.items查看某台minion的所有Grains信息。

Grains的功能：

收集资产信息

Grains应用场景：

信息查询
在命令行下进行目标匹配
在top file中进行目标匹配
在模板中进行目标匹配

模板中进行目标匹配请看：Storing Static Data in the Pillar

信息查询实例：

//列出所有grains的key和value
[root@master base]# salt 'node1' grains.items //以node1为例
node1:
    ----------
    biosreleasedate:
        07/22/2020
    biosversion:
        6.00
    cpu_flags:
        - fpu
        - vme
        - de
        - pse
        - tsc
        - msr
        - pae
        - mce
        - cx8
        - apic
        - sep
        - mtrr
        - pge
        - mca
        - cmov
        - pat
        - pse36
        - clflush
        - mmx
        - fxsr
        - sse
        - sse2
        - ss
        - ht
        - syscall
        - nx
        - pdpe1gb
        - rdtscp
        - lm
        - constant_tsc
        - arch_perfmon
        - nopl
        - xtopology
        - tsc_reliable
        - nonstop_tsc
        - eagerfpu
        - pni
        - pclmulqdq
        - ssse3
        - fma
        - cx16
        - pcid
        - sse4_1
        - sse4_2
        - x2apic
        - movbe
        - popcnt
        - tsc_deadline_timer
        - aes
        - xsave
        - avx
        - f16c
        - rdrand
        - hypervisor
        - lahf_lm
        - abm
        - 3dnowprefetch
        - fsgsbase
        - tsc_adjust
        - bmi1
        - avx2
        - smep
        - bmi2
        - invpcid
        - rdseed
        - adx
        - smap
        - clflushopt
        - xsaveopt
        - xsavec
        - xgetbv1
        - ibpb
        - ibrs
        - stibp
        - arat
        - spec_ctrl
        - intel_stibp
        - arch_capabilities
    cpu_model:
        Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
    cpuarch:
        x86_64
    cwd:
        /
    disks:
        - sda
        - sr0
    dns:
        ----------
        domain:
        ip4_nameservers:
            - 192.168.75.2
        ip6_nameservers:
        nameservers:
            - 192.168.75.2
        options:
        search:
            - localdomain
        sortlist:
    domain:
    efi:
        False
    efi-secure-boot:
        False
    fqdn:
        node1
    fqdn_ip4:
        - 192.168.75.150
    fqdn_ip6:
        - fe80::5e93:d112:1456:d433
    fqdns:
        - node1
    gid:
        0
    gpus:
        |_
          ----------
          model:
              SVGA II Adapter
          vendor:
              vmware
    groupname:
        root
    host:
        node1
    hwaddr_interfaces:
        ----------
        ens33:
            00:0c:29:bf:1c:fe
        lo:
            00:00:00:00:00:00
    id:
        node1
    init:
        systemd
    ip4_gw:
        192.168.75.2
    ip4_interfaces:
        ----------
        ens33:
            - 192.168.75.150
        lo:
            - 127.0.0.1
    ip6_gw:
        False
    ip6_interfaces:
        ----------
        ens33:
            - fe80::5e93:d112:1456:d433
        lo:
            - ::1
    ip_gw:
        True
    ip_interfaces:
        ----------
        ens33:
            - 192.168.75.150
            - fe80::5e93:d112:1456:d433
        lo:
            - 127.0.0.1
            - ::1
    ipv4:
        - 127.0.0.1
        - 192.168.75.150
    ipv6:
        - ::1
        - fe80::5e93:d112:1456:d433
    kernel:
        Linux
    kernelparams:
        |_
          - BOOT_IMAGE
          - /vmlinuz-3.10.0-862.el7.x86_64
        |_
          - root
          - /dev/mapper/centos-root
        |_
          - ro
          - None
        |_
          - crashkernel
          - auto
        |_
          - rd.lvm.lv
          - centos/root
        |_
          - rd.lvm.lv
          - centos/swap
        |_
          - rhgb
          - None
        |_
          - quiet
          - None
        |_
          - LANG
          - zh_CN.UTF-8
    kernelrelease:
        3.10.0-862.el7.x86_64
    kernelversion:
        #1 SMP Fri Apr 20 16:44:24 UTC 2018
    locale_info:
        ----------
        defaultencoding:
            UTF-8
        defaultlanguage:
            zh_CN
        detectedencoding:
            UTF-8
        timezone:
            unknown
    localhost:
        node1
    lsb_distrib_codename:
        CentOS Linux 7 (Core)
    lsb_distrib_id:
        CentOS Linux
    lvm:
        ----------
        centos:
            - root
            - swap
    machine_id:
        2ad18040d6874d6ab981e9adc63bcaef
    manufacturer:
        VMware, Inc.
    master:
        192.168.75.128
    mdadm:
    mem_total:
        7805
    nodename:
        node1
    num_cpus:
        4
    num_gpus:
        1
    os:
        CentOS
    os_family:
        RedHat
    osarch:
        x86_64
    oscodename:
        CentOS Linux 7 (Core)
    osfinger:
        CentOS Linux-7
    osfullname:
        CentOS Linux
    osmajorrelease:
        7
    osrelease:
        7.5.1804
    osrelease_info:
        - 7
        - 5
        - 1804
    path:
        /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
    pid:
        28837
    productname:
        VMware Virtual Platform
    ps:
        ps -efHww
    pythonexecutable:
        /usr/bin/python3
    pythonpath:
        - /usr/bin
        - /usr/lib64/python36.zip
        - /usr/lib64/python3.6
        - /usr/lib64/python3.6/lib-dynload
        - /usr/lib64/python3.6/site-packages
        - /usr/lib/python3.6/site-packages
    pythonversion:
        - 3
        - 6
        - 8
        - final
        - 0
    saltpath:
        /usr/lib/python3.6/site-packages/salt
    saltversion:
        3004
    saltversioninfo:
        - 3004
    selinux:
        ----------
        enabled:
            False
        enforced:
            Disabled
    serialnumber:
        VMware-56 4d 7c 0c 45 da fb 9a-aa 15 98 8b 70 bf 1c fe
    server_id:
        1797241226
    shell:
        /bin/sh
    ssds:
    swap_total:
        2047
    systemd:
        ----------
        features:
            +PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 -SECCOMP +BLKID +ELFUTILS +KMOD +IDN
        version:
            219
    systempath:
        - /usr/local/sbin
        - /usr/local/bin
        - /usr/sbin
        - /usr/bin
    transactional:
        False
    uid:
        0
    username:
        root
    uuid:
        0c7c4d56-da45-9afb-aa15-988b70bf1cfe
    virtual:
        VMware
    zfs_feature_flags:
        False
    zfs_support:
        False
    zmqversion:
        4.1.4
[root@master base]#

目标匹配实例：
用Grains来匹配minion

//匹配CentOS操作系统的主机，然后显示时间
[root@master base]# salt -G 'os:CentOS' cmd.run 'uptime'
node1:
     17:09:16 up  1:40,  2 users,  load average: 0.03, 0.06, 0.05
[root@master base]#

在top file里面使用Grains

[root@master ~]# vim /srv/salt/base/top.sls
base:
  'os:CentOS':
    - match: grain
    - web.apache.ainstall

自定义Grains的两种方法：

minion配置文件，在配置文件中搜索grains
在/etc/salt下生成一个grains文件，在此文件中定义(推荐方式)

[root@master ~]# vim /etc/salt/grains
test-grains: linux-node1
[root@master ~]# systemctl restart salt-minion
[root@master ~]# salt '*' grains.get test-grains
192.168.69.201:
    linux-node1
192.168.69.202:

不重启的情况下自定义Grains：

[root@master base]# vim /etc/salt/grains
[root@master base]# cat /etc/salt/grains
test-grains: linux-node1
yang: wuhu
[root@master base]# salt '*' saltutil.sync_grains
node1:
node2:
master:
node3:
[root@master base]# salt '*' grains.get yang
192.168.75.150
    yang

SaltStack组件之Pillar

Pillar也是SaltStack组件中非常重要的组件之一，是数据管理中心，经常配置states在大规模的配置管理工作中使用它。Pillar在SaltStack中主要的作用就是存储和定义配置管理中需要的一些数据，比如软件版本号、用户名密码等信息，它的定义存储格式与Grains类似，都是YAML格式。

在Master配置文件中有一段Pillar settings选项专门定义Pillar相关的一些参数：

#pillar_roots:
#  base:
#    - /srv/pillar

默认Base环境下Pillar的工作目录在/srv/pillar目录下。若你想定义多个环境不同的Pillar工作目录，只需要修改此处配置文件即可。

Pillar的特点：

可以给指定的minion定义它需要的数据
只有指定的人才能看到定义的数据
在master配置文件里设置

[root@master base]# salt '*' pillar.items
node2:
    ----------
node1:
    ----------
node3:
    ----------
master:
    ----------
[root@master base]#

默认pillar是没有任何信息的，如果想查看信息，需要在 master 配置文件上把 pillar_opts的注释取消，并将其值设为 True。

[root@master base]# vim /etc/salt/master
909 pillar_opts: True
[root@master base]# vim /etc/salt/master
[root@master base]# systemctl restart salt-master.service 
node3:master base]# salt '*' pillar.items
    ----------
    master:
        ----------
        __cli:
            salt-master
        __role:
            master
        allow_minion_key_revoke:
            True
        archive_jobs:
            False
        auth_events:
            True
        auth_mode:
            1
      ......
        winrepo_remotes:
            - https://github.com/saltstack/salt-winrepo.git
        winrepo_remotes_ng:
            - https://github.com/saltstack/salt-winrepo-ng.git
        winrepo_ssl_verify:
            True
        winrepo_user:
        worker_threads:
            5
        zmq_backlog:
            1000
        zmq_filtering:
            False
        zmq_monitor:
            False
[root@master base]#

pillar自定义数据：
在master的配置文件里找pillar_roots可以看到其存放pillar的位置

[root@master base]# vim /etc/salt/master
 855 # available to different minions based on minion grain filter     ing. The Salt
 856 # Pillar is laid out in the same fashion as the file server,      with environments,
 857 # a top file and sls files. However, pillar data does not nee     d to be in the
 858 # highstate format, and is generally just key/value pairs.
 859 pillar_roots:
 860   base:
 861     - /srv/pillar/base
 862   prod:
 863     - /srv/pillar/proe

[root@master base]# mkdir -p /srv/pillar/{base,prod}
[root@master base]#  tree /srv/pillar/
/srv/pillar/
├── base
└── prod

2 directories, 0 files
[root@master base]# 


//在salt下修改apache的状态文件，引用pillar的数据
[root@master ~]# vim /srv/salt/base/web/apache/apache.sls
apache-install:
  pkg.installed:
    - name: {{ pillar['apache'] }}

apache-service:
  service.running:
    - name: {{ pillar['apache'] }}
    - enable: True


//执行高级状态文件
[root@master ~]# salt 'node1' state.highstate
192.168.69.202:
----------
          ID: apache-install
    Function: pkg.installed
        Name: httpd
      Result: True
     Comment: All specified packages are already installed
     Started: 19:04:03.507998
    Duration: 1437.852 ms
     Changes:
----------
          ID: apache-service
    Function: service.running
        Name: httpd
      Result: True
     Comment: The service httpd is already running
     Started: 19:04:04.949120
    Duration: 88.905 ms
     Changes:

Summary for 192.168.75.150
------------
Succeeded: 2
Failed:    0
------------
Total states run:     2
Total run time:   1.527 s

凤箫声动.

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
SaltStack配置管理与数据系统

环境master 192.168.75.128 node1 192.168.75.150 node2 192.168.75.142 node3 192.168.75.143 YAML语言YAML是一种直观的能够被电脑识别的数据序列化格式，是一个可读性高并且容易被人类阅读，容易和脚本语言交互，用来表达资料序列的编程语言。它类似于标准通用标记语言的子集XML的数据描述语言，语法比XML简单很多。YAML语言的格式如下：house: famil
复制链接

扫一扫

专栏目录