# salt-api
https://docs.saltstack.com/en/latest/topics/netapi/writing.html
1. yum install salt-api
2. yum install pyOpenSSL
3. salt-call --local tls.create_self_signed_cert
[ERROR ] You should upgrade pyOpenSSL to at least 0.14.1 to enable the use of X509 extensions
local:
Created Private Key: "/etc/pki/tls/certs/localhost.key." Created Certificate: "/etc/pki/tls/certs/localhost.crt."
4. vim /etc/salt/master.d/api.conf
rest_cherrypy:
host: 192.168.2.103
port: 8000
ssl_cert: /etc/pki/tls/certs/localhost.crt
ssl_key: /etc/pki/tls/certs/localhost.key
5. useradd -M -s /sbin/nologin saltapi # 创建用户 -M 不创建home目录 -s 仅做验证
6. echo "saltapi" | passwd saltapi --stdin # 非交互式创建密码
7. vim /etc/salt/master.d/auth.conf
external_auth:
pam:
saltapi:
- .*
- '@wheel'
- '@runner'
- '@jobs'
8. systemctl restart salt-master
9. systemctl start salt-api
10. curl -sSk http://192.168.2.103:8000/login \
-H 'Accept: application/x-yaml' \
-H 'X-Auth-Token: xxxxxxxxxxxxxxxxxxxx' \
-d username='saltapi' \
-d password='saltapi' \
-d eauth='pam'
09-14
3608
![](https://csdnimg.cn/release/blogv2/dist/pc/img/readCountWhite.png)
12-19
673
![](https://csdnimg.cn/release/blogv2/dist/pc/img/readCountWhite.png)
11-15
5654
![](https://csdnimg.cn/release/blogv2/dist/pc/img/readCountWhite.png)
“相关推荐”对你有帮助么?
-
非常没帮助
-
没帮助
-
一般
-
有帮助
-
非常有帮助
提交