环境
master | 192.168.75.128 |
node1 | 192.168.75.150 |
node2 | 192.168.75.142 |
node3 | 192.168.75.143 |
YAML语言
YAML
是一种直观的能够被电脑识别的数据序列化格式,是一个可读性高并且容易被人类阅读,容易和脚本语言交互,用来表达资料序列的编程语言。
它类似于标准通用标记语言的子集XML的数据描述语言,语法比XML简单很多。
YAML
语言的格式如下:
house:
family:
name: Doe
parents:
- John
- Jane
children:
- Paul
- Mark
- Simone
address:
number: 34
street: Main Street
city: Nowheretown
zipcode: 12345
YAML的基本规则:
- 使用缩进来表示层级关系,每层2个空格,禁止使用TAB键
- 当冒号不是处于最后时,冒号后面必须有一个空格
- 用 - 表示列表,- 的后面必须有一个空格
- 用 # 表示注释
YAML
配置文件要放到SaltStack
让我们放的位置,可以在SaltStack
的 Master 配置文件中查找file_roots
即可看到。
[root@master ~]# vim /etc/salt/master
[root@master ~]# vim /etc/salt/master
...此处省略N行
file_roots:
base: //基础环境
- /srv/salt/base
test: //测试环境
- /srv/salt/test
dev: //开发环境
- /srv/salt/dev
prod: //生产环境
- /srv/salt/prod
...此处省略N行
[root@master ~]# mkdir -p /srv/salt/{base,test,dev,prod}
[root@master ~]# tree /srv/salt/
/srv/salt/
├── base
├── dev
├── prod
└── test
4 directories, 0 files
[root@master ~]# systemctl restart salt-master
需要注意:
- base是默认的位置,如果file_roots只有一个,则base是必备的且必须叫base,不能改名
用SaltStack配置一个apache实例
在Master上部署sls配置文件并执行
环境部署
[root@master ~]# tree /srv/salt/
/srv/salt/
├── base
├── dev
├── prod
└── test
4 directories, 0 files
[root@master ~]# salt-key -L
Accepted Keys:
master
node1
node2
node3
Denied Keys:
Unaccepted Keys:
Rejected Keys:
[root@master ~]# salt '*' test.ping
node2:
True
node1:
True
master:
True
node3:
True
[root@master ~]#
实例:
//创建项目存放的目录
[root@master ~]# cd /srv/salt/base/
[root@master base]# ls
[root@master base]# mkdir -p web/apache
[root@master base]# tree web/
web/
└── apache
1 directory, 0 files
[root@master base]#
//编写
[root@master base]# vim web/apache/install.sls
[root@master base]# cat web/apache/install.sls
apache-install: //在YAML文件中全局唯一的ID
pkg.install: //用pkg.install下载apache
- name: httpd //要下载的服务名字
apache-service:
service.running: //用service.running模块来控制服务的启动状态
- name: httpd
- enable: true //设置开机自启
//启动
[root@master base]# salt 'node1' state.sls web.apache.install
node1:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 15:30:52.613334
Duration: 515.583 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 15:30:53.130985
Duration: 30.315 ms
Changes:
Summary for node1
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 545.898 ms
[root@master base]#
//在测试环境下也执行一下
[root@master test]# salt 'node2' state.sls web.apache.install saltenv=test //须指向test环境
node2:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 15:42:09.609740
Duration: 640.168 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 15:42:10.251822
Duration: 39.733 ms
Changes:
Summary for node2
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 679.901 ms
[root@master test]#
在Minion上检查
//node1
[root@node1 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: active (running) since 二 2021-11-02 15:29:31 CST; 13min ago
Docs: man:httpd(8)
man:apachectl(8)
Main PID: 41701 (httpd)
Status: "Total requests: 0; Current requests/sec: 0; Current traffic: 0 B/sec"
CGroup: /system.slice/httpd.service
├─41701 /usr/sbin/httpd -DFOREGROUND
├─42158 /usr/sbin/httpd -DFOREGROUND
├─42159 /usr/sbin/httpd -DFOREGROUND
├─42161 /usr/sbin/httpd -DFOREGROUND
├─42162 /usr/sbin/httpd -DFOREGROUND
└─42163 /usr/sbin/httpd -DFOREGROUND
11月 02 15:29:06 node1 systemd[1]: Starting The Apache HTTP Se...
11月 02 15:29:21 node1 httpd[41701]: AH00558: httpd: Could not...
11月 02 15:29:31 node1 systemd[1]: Started The Apache HTTP Ser...
Hint: Some lines were ellipsized, use -l to show in full.
[root@node1 ~]#
//node2
[root@node2 minion]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled>
Active: active (running) since Tue 2021-11-02 15:36:16 CST; 7m>
Docs: man:httpd.service(8)
Main PID: 490328 (httpd)
Status: "Running, listening on: port 80"
Tasks: 213 (limit: 23789)
Memory: 44.7M
CGroup: /system.slice/httpd.service
├─490328 /usr/sbin/httpd -DFOREGROUND
├─491147 /usr/sbin/httpd -DFOREGROUND
├─491148 /usr/sbin/httpd -DFOREGROUND
├─491149 /usr/sbin/httpd -DFOREGROUND
└─491150 /usr/sbin/httpd -DFOREGROUND
11月 02 15:35:57 node2 systemd[1]: Starting The Apache HTTP Serve>
11月 02 15:36:16 node2 httpd[490328]: AH00558: httpd: Could not r>
11月 02 15:36:16 node2 systemd[1]: Started The Apache HTTP Server.
11月 02 15:36:26 node2 httpd[490328]: Server configured, listenin>
[root@node2 minion]#
top file
op file介绍
直接通过命令执行sls文件时够自动化吗?答案是否定的,因为我们还要告诉某台主机要执行某个任务,自动化应该是我们让它干活时,它自己就知道哪台主机要干什么活,但是直接通过命令执行sls文件并不能达到这个目的,为了解决这个问题,top file 应运而生。
top file就是一个入口,top file的文件名可通过在 Master的配置文件中搜索top.sls找出,且此文件必须在 base 环境中,默认情况下此文件必须叫top.sls。
top file的作用就是告诉对应的主机要干什么活,比如让web服务器启动web服务,让数据库服务器安装mysql等等。
top file 实例:
//编写一个安装mariadb的yaml文件
[root@master base]# mkdir -p database/mariadb
[root@master base]# vim database/mariadb/install.sls
[root@master base]# cat database/mariadb/install.sls
mysql-install:
pkg.installed:
- name: mariadb-server
mysql-service:
service.running:
- name: mariadb
- enable: ture
[root@master base]# salt 'node2' state.sls database.mariadb.install
node2:
----------
ID: mysql-install
Function: pkg.installed
Name: mariadb-server
Result: True
Comment: All specified packages are already installed
Started: 16:19:41.872158
Duration: 647.731 ms
Changes:
----------
ID: mysql-service
Function: service.running
Name: mariadb
Result: True
Comment: The service mariadb is already running
Started: 16:19:42.521593
Duration: 42.359 ms
Changes:
Summary for node2
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 690.090 ms
//在创建一个nginx并安装
[root@master base]# salt 'node2' state.sls database.mariadb.install
node2:
----------
ID: mysql-install
Function: pkg.installed
Name: mariadb-server
Result: True
Comment: All specified packages are already installed
Started: 16:19:41.872158
Duration: 647.731 ms
Changes:
----------
ID: mysql-service
Function: service.running
Name: mariadb
Result: True
Comment: The service mariadb is already running
Started: 16:19:42.521593
Duration: 42.359 ms
Changes:
Summary for node2
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 690.090 ms
//查看结构
[root@master base]# tree
.
├── database
│ └── mariadb
│ └── install.sls
└── web
├── apache
│ └── install.sls
└── nginx
└── install.sls
//卸载node1 和 node2 上的apache和nginx
[root@node1 ~]# yum -y remove httpd
[root@node2 ~]# yum -y remove nginx
//写高级状态的yml文件
[root@master base]# cat top.sls
base:
node2:
- web.nginx.install //在node2的基础环境下执行web/nginx/install.sls文件
node1:
- web.apache.install
//执行
[root@master base]# salt '*' state.highstate
node3:
----------
ID: states
Function: no.None
Result: False
Comment: No Top file or master_tops data matches found. Please see master log for details.
Changes:
Summary for node3
------------
Succeeded: 0
Failed: 1 //错误正常,因为文件里没有指定node3和master主机
------------
Total states run: 1
Total run time: 0.000 ms
master:
----------
ID: states
Function: no.None
Result: False
Comment: No Top file or master_tops data matches found. Please see master log for details.
Changes:
Summary for master
------------
Succeeded: 0
Failed: 1
------------
Total states run: 1
Total run time: 0.000 ms
node1:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 16:35:35.119041
Duration: 596.08 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 16:35:35.717178
Duration: 37.481 ms
Changes:
Summary for node1
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 633.561 ms
node2:
----------
ID: nginx-install
Function: pkg.installed
Name: nginx
Result: True
Comment: All specified packages are already installed
Started: 16:35:35.145534
Duration: 750.724 ms
Changes:
----------
ID: nginx-service
Function: service.running
Name: nginx
Result: True
Comment: The service nginx is already running
Started: 16:35:35.897906
Duration: 43.669 ms
Changes:
Summary for node2
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 794.393 ms
ERROR: Minions returned with non-zero exit code
[root@master base]#
//在node1和node2查看
[root@node1 ~]# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disabled)
Active: active (running) since 二 2021-11-02 16:33:42 CST; 5min ago
Docs: man:httpd(8)
man:apachectl(8)
Main PID: 70434 (httpd)
Status: "Total requests: 0; Current requests/sec: 0; Current traffic: 0 B/sec"
CGroup: /system.slice/httpd.service
├─70434 /usr/sbin/httpd -DFOREGROUND
├─70919 /usr/sbin/httpd -DFOREGROUND
├─70921 /usr/sbin/httpd -DFOREGROUND
├─70922 /usr/sbin/httpd -DFOREGROUND
├─70923 /usr/sbin/httpd -DFOREGROUND
└─70924 /usr/sbin/httpd -DFOREGROUND
11月 02 16:33:15 node1 systemd[1]: Starting The Apache HTTP Se...
11月 02 16:33:31 node1 httpd[70434]: AH00558: httpd: Could not...
11月 02 16:33:42 node1 systemd[1]: Started The Apache HTTP Ser...
Hint: Some lines were ellipsized, use -l to show in full.
[root@node1 ~]#
[root@node2 ~]# systemctl status nginx
● nginx.service - The nginx HTTP and reverse proxy server
Loaded: loaded (/usr/lib/systemd/system/nginx.service; disable>
Active: active (running) since Tue 2021-11-02 16:32:34 CST; 7m>
Process: 528204 ExecStart=/usr/sbin/nginx (code=exited, status=>
Process: 528202 ExecStartPre=/usr/sbin/nginx -t (code=exited, s>
Process: 528200 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (cod>
Main PID: 528205 (nginx)
Tasks: 5 (limit: 23789)
Memory: 8.6M
CGroup: /system.slice/nginx.service
├─528205 nginx: master process /usr/sbin/nginx
├─528206 nginx: worker process
├─528207 nginx: worker process
├─528208 nginx: worker process
└─528209 nginx: worker process
11月 02 16:32:34 node2 systemd[1]: Starting The nginx HTTP and re>
11月 02 16:32:34 node2 nginx[528202]: nginx: the configuration fi>
11月 02 16:32:34 node2 nginx[528202]: nginx: configuration file />
11月 02 16:32:34 node2 systemd[1]: Started The nginx HTTP and rev>
[root@node2 ~]#
//创建一个所有主机都执行的任务
[root@master base]# tree
.
├── database
│ └── mariadb
│ └── install.sls
├── top.sls
└── web
├── apache
│ └── install.sls
└── nginx
└── install.sls
5 directories, 4 files
[root@master base]# vim top.sls
[root@master base]# cat top.sls
base:
'*': //所有主机都会执行这个文件,安装mariadb
- database.mariadb.install
node2:
- web.nginx.install
node1:
- web.apache.install
//执行(就不会向上方一样有feild)
[root@master base]# salt '*' state.highstate
node1:
----------
ID: mysql-install
Function: pkg.installed
Name: mariadb-server
Result: True
Comment: All specified packages are already installed
Started: 16:57:14.504140
Duration: 891.232 ms
Changes:
----------
ID: mysql-service
Function: service.running
Name: mariadb
Result: True
Comment: The service mariadb is already running
Started: 16:57:15.399106
Duration: 49.141 ms
Changes:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 16:57:15.448662
Duration: 35.327 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 16:57:15.484172
Duration: 38.35 ms
Changes:
Summary for node1
------------
Succeeded: 4
Failed: 0
------------
Total states run: 4
Total run time: 1.014 s
node2:
----------
ID: mysql-install
Function: pkg.installed
Name: mariadb-server
Result: True
Comment: All specified packages are already installed
Started: 16:57:14.567072
Duration: 1138.299 ms
Changes:
----------
ID: mysql-service
Function: service.running
Name: mariadb
Result: True
Comment: The service mariadb is already running
Started: 16:57:15.706923
Duration: 66.631 ms
Changes:
----------
ID: nginx-install
Function: pkg.installed
Name: nginx
Result: True
Comment: All specified packages are already installed
Started: 16:57:15.773792
Duration: 29.907 ms
Changes:
----------
ID: nginx-service
Function: service.running
Name: nginx
Result: True
Comment: The service nginx is already running
Started: 16:57:15.803861
Duration: 45.728 ms
Changes:
Summary for node2
------------
Succeeded: 4
Failed: 0
------------
Total states run: 4
Total run time: 1.281 s
node3:
----------
ID: mysql-install
Function: pkg.installed
Name: mariadb-server
Result: True
Comment: All specified packages are already installed
Started: 16:57:15.037904
Duration: 2030.522 ms
Changes:
----------
ID: mysql-service
Function: service.running
Name: mariadb
Result: True
Comment: The service mariadb is already running
Started: 16:57:17.070519
Duration: 64.872 ms
Changes:
Summary for node3
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 2.095 s
master:
----------
ID: mysql-install
Function: pkg.installed
Name: mariadb-server
Result: True
Comment: All specified packages are already installed
Started: 16:57:15.252274
Duration: 1966.778 ms
Changes:
----------
ID: mysql-service
Function: service.running
Name: mariadb
Result: True
Comment: The service mariadb is already running
Started: 16:57:17.220688
Duration: 98.295 ms
Changes:
Summary for master
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 2.065 s
[root@master base]#
//也可以指定某台主机运行任务
[root@master base]# salt 'node2' state.highstate //单独指定node2主机干活
node2:
----------
ID: mysql-install
Function: pkg.installed
Name: mariadb-server
Result: True
Comment: All specified packages are already installed
Started: 16:59:28.731207
Duration: 710.421 ms
Changes:
----------
ID: mysql-service
Function: service.running
Name: mariadb
Result: True
Comment: The service mariadb is already running
Started: 16:59:29.443087
Duration: 44.493 ms
Changes:
----------
ID: nginx-install
Function: pkg.installed
Name: nginx
Result: True
Comment: All specified packages are already installed
Started: 16:59:29.487794
Duration: 20.505 ms
Changes:
----------
ID: nginx-service
Function: service.running
Name: nginx
Result: True
Comment: The service nginx is already running
Started: 16:59:29.508448
Duration: 34.587 ms
Changes:
Summary for node2
------------
Succeeded: 4
Failed: 0
------------
Total states run: 4
Total run time: 810.006 ms
[root@master base]#
SaltStack数据系统
SaltStack有两大数据系统,分别是:
- Grains
- PillarSaltStack数据系统组件
SaltStack数据系统组件
SaltStack组件之Grains
Grains
是SaltStack
的一个组件,其存放着minion启动时收集到的信息。
Grains
是SaltStack
组件中非常重要的组件之一,因为我们在做配置部署的过程中会经常使用它,Grains
是SaltStack
记录minion
的一些静态信息的组件。可简单理解为Grains
记录着每台minion
的一些常用属性,比如CPU、内存、磁盘、网络信息等。我们可以通过grains.items
查看某台minion
的所有Grains
信息。
Grains的功能:
- 收集资产信息
Grains应用场景:
- 信息查询
- 在命令行下进行目标匹配
- 在top file中进行目标匹配
- 在模板中进行目标匹配
模板中进行目标匹配请看:Storing Static Data in the Pillar
信息查询实例:
//列出所有grains的key和value
[root@master base]# salt 'node1' grains.items //以node1为例
node1:
----------
biosreleasedate:
07/22/2020
biosversion:
6.00
cpu_flags:
- fpu
- vme
- de
- pse
- tsc
- msr
- pae
- mce
- cx8
- apic
- sep
- mtrr
- pge
- mca
- cmov
- pat
- pse36
- clflush
- mmx
- fxsr
- sse
- sse2
- ss
- ht
- syscall
- nx
- pdpe1gb
- rdtscp
- lm
- constant_tsc
- arch_perfmon
- nopl
- xtopology
- tsc_reliable
- nonstop_tsc
- eagerfpu
- pni
- pclmulqdq
- ssse3
- fma
- cx16
- pcid
- sse4_1
- sse4_2
- x2apic
- movbe
- popcnt
- tsc_deadline_timer
- aes
- xsave
- avx
- f16c
- rdrand
- hypervisor
- lahf_lm
- abm
- 3dnowprefetch
- fsgsbase
- tsc_adjust
- bmi1
- avx2
- smep
- bmi2
- invpcid
- rdseed
- adx
- smap
- clflushopt
- xsaveopt
- xsavec
- xgetbv1
- ibpb
- ibrs
- stibp
- arat
- spec_ctrl
- intel_stibp
- arch_capabilities
cpu_model:
Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
cpuarch:
x86_64
cwd:
/
disks:
- sda
- sr0
dns:
----------
domain:
ip4_nameservers:
- 192.168.75.2
ip6_nameservers:
nameservers:
- 192.168.75.2
options:
search:
- localdomain
sortlist:
domain:
efi:
False
efi-secure-boot:
False
fqdn:
node1
fqdn_ip4:
- 192.168.75.150
fqdn_ip6:
- fe80::5e93:d112:1456:d433
fqdns:
- node1
gid:
0
gpus:
|_
----------
model:
SVGA II Adapter
vendor:
vmware
groupname:
root
host:
node1
hwaddr_interfaces:
----------
ens33:
00:0c:29:bf:1c:fe
lo:
00:00:00:00:00:00
id:
node1
init:
systemd
ip4_gw:
192.168.75.2
ip4_interfaces:
----------
ens33:
- 192.168.75.150
lo:
- 127.0.0.1
ip6_gw:
False
ip6_interfaces:
----------
ens33:
- fe80::5e93:d112:1456:d433
lo:
- ::1
ip_gw:
True
ip_interfaces:
----------
ens33:
- 192.168.75.150
- fe80::5e93:d112:1456:d433
lo:
- 127.0.0.1
- ::1
ipv4:
- 127.0.0.1
- 192.168.75.150
ipv6:
- ::1
- fe80::5e93:d112:1456:d433
kernel:
Linux
kernelparams:
|_
- BOOT_IMAGE
- /vmlinuz-3.10.0-862.el7.x86_64
|_
- root
- /dev/mapper/centos-root
|_
- ro
- None
|_
- crashkernel
- auto
|_
- rd.lvm.lv
- centos/root
|_
- rd.lvm.lv
- centos/swap
|_
- rhgb
- None
|_
- quiet
- None
|_
- LANG
- zh_CN.UTF-8
kernelrelease:
3.10.0-862.el7.x86_64
kernelversion:
#1 SMP Fri Apr 20 16:44:24 UTC 2018
locale_info:
----------
defaultencoding:
UTF-8
defaultlanguage:
zh_CN
detectedencoding:
UTF-8
timezone:
unknown
localhost:
node1
lsb_distrib_codename:
CentOS Linux 7 (Core)
lsb_distrib_id:
CentOS Linux
lvm:
----------
centos:
- root
- swap
machine_id:
2ad18040d6874d6ab981e9adc63bcaef
manufacturer:
VMware, Inc.
master:
192.168.75.128
mdadm:
mem_total:
7805
nodename:
node1
num_cpus:
4
num_gpus:
1
os:
CentOS
os_family:
RedHat
osarch:
x86_64
oscodename:
CentOS Linux 7 (Core)
osfinger:
CentOS Linux-7
osfullname:
CentOS Linux
osmajorrelease:
7
osrelease:
7.5.1804
osrelease_info:
- 7
- 5
- 1804
path:
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
pid:
28837
productname:
VMware Virtual Platform
ps:
ps -efHww
pythonexecutable:
/usr/bin/python3
pythonpath:
- /usr/bin
- /usr/lib64/python36.zip
- /usr/lib64/python3.6
- /usr/lib64/python3.6/lib-dynload
- /usr/lib64/python3.6/site-packages
- /usr/lib/python3.6/site-packages
pythonversion:
- 3
- 6
- 8
- final
- 0
saltpath:
/usr/lib/python3.6/site-packages/salt
saltversion:
3004
saltversioninfo:
- 3004
selinux:
----------
enabled:
False
enforced:
Disabled
serialnumber:
VMware-56 4d 7c 0c 45 da fb 9a-aa 15 98 8b 70 bf 1c fe
server_id:
1797241226
shell:
/bin/sh
ssds:
swap_total:
2047
systemd:
----------
features:
+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 -SECCOMP +BLKID +ELFUTILS +KMOD +IDN
version:
219
systempath:
- /usr/local/sbin
- /usr/local/bin
- /usr/sbin
- /usr/bin
transactional:
False
uid:
0
username:
root
uuid:
0c7c4d56-da45-9afb-aa15-988b70bf1cfe
virtual:
VMware
zfs_feature_flags:
False
zfs_support:
False
zmqversion:
4.1.4
[root@master base]#
目标匹配实例:
用Grains
来匹配minion
//匹配CentOS操作系统的主机,然后显示时间
[root@master base]# salt -G 'os:CentOS' cmd.run 'uptime'
node1:
17:09:16 up 1:40, 2 users, load average: 0.03, 0.06, 0.05
[root@master base]#
在top file里面使用Grains
[root@master ~]# vim /srv/salt/base/top.sls
base:
'os:CentOS':
- match: grain
- web.apache.ainstall
自定义Grains的两种方法:
- minion配置文件,在配置文件中搜索grains
- 在/etc/salt下生成一个grains文件,在此文件中定义(推荐方式)
[root@master ~]# vim /etc/salt/grains
test-grains: linux-node1
[root@master ~]# systemctl restart salt-minion
[root@master ~]# salt '*' grains.get test-grains
192.168.69.201:
linux-node1
192.168.69.202:
不重启的情况下自定义Grains
:
[root@master base]# vim /etc/salt/grains
[root@master base]# cat /etc/salt/grains
test-grains: linux-node1
yang: wuhu
[root@master base]# salt '*' saltutil.sync_grains
node1:
node2:
master:
node3:
[root@master base]# salt '*' grains.get yang
192.168.75.150
yang
SaltStack组件之Pillar
Pillar也是SaltStack组件中非常重要的组件之一,是数据管理中心,经常配置states在大规模的配置管理工作中使用它。Pillar在SaltStack中主要的作用就是存储和定义配置管理中需要的一些数据,比如软件版本号、用户名密码等信息,它的定义存储格式与Grains类似,都是YAML格式。
在Master配置文件中有一段Pillar settings选项专门定义Pillar相关的一些参数:
#pillar_roots:
# base:
# - /srv/pillar
默认Base环境下Pillar的工作目录在/srv/pillar目录下。若你想定义多个环境不同的Pillar工作目录,只需要修改此处配置文件即可。
Pillar的特点:
- 可以给指定的minion定义它需要的数据
- 只有指定的人才能看到定义的数据
- 在master配置文件里设置
[root@master base]# salt '*' pillar.items
node2:
----------
node1:
----------
node3:
----------
master:
----------
[root@master base]#
默认pillar
是没有任何信息的,如果想查看信息,需要在 master 配置文件上把 pillar_opts
的注释取消,并将其值设为 True。
[root@master base]# vim /etc/salt/master
909 pillar_opts: True
[root@master base]# vim /etc/salt/master
[root@master base]# systemctl restart salt-master.service
node3:master base]# salt '*' pillar.items
----------
master:
----------
__cli:
salt-master
__role:
master
allow_minion_key_revoke:
True
archive_jobs:
False
auth_events:
True
auth_mode:
1
......
winrepo_remotes:
- https://github.com/saltstack/salt-winrepo.git
winrepo_remotes_ng:
- https://github.com/saltstack/salt-winrepo-ng.git
winrepo_ssl_verify:
True
winrepo_user:
worker_threads:
5
zmq_backlog:
1000
zmq_filtering:
False
zmq_monitor:
False
[root@master base]#
pillar自定义数据:
在master的配置文件里找pillar_roots可以看到其存放pillar的位置
[root@master base]# vim /etc/salt/master
855 # available to different minions based on minion grain filter ing. The Salt
856 # Pillar is laid out in the same fashion as the file server, with environments,
857 # a top file and sls files. However, pillar data does not nee d to be in the
858 # highstate format, and is generally just key/value pairs.
859 pillar_roots:
860 base:
861 - /srv/pillar/base
862 prod:
863 - /srv/pillar/proe
[root@master base]# mkdir -p /srv/pillar/{base,prod}
[root@master base]# tree /srv/pillar/
/srv/pillar/
├── base
└── prod
2 directories, 0 files
[root@master base]#
//在salt下修改apache的状态文件,引用pillar的数据
[root@master ~]# vim /srv/salt/base/web/apache/apache.sls
apache-install:
pkg.installed:
- name: {{ pillar['apache'] }}
apache-service:
service.running:
- name: {{ pillar['apache'] }}
- enable: True
//执行高级状态文件
[root@master ~]# salt 'node1' state.highstate
192.168.69.202:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 19:04:03.507998
Duration: 1437.852 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 19:04:04.949120
Duration: 88.905 ms
Changes:
Summary for 192.168.75.150
------------
Succeeded: 2
Failed: 0
------------
Total states run: 2
Total run time: 1.527 s