超详细saltstack安装部署及应用

最新推荐文章于 2023-07-25 10:35:56 发布
最新推荐文章于 2023-07-25 10:35:56 发布
阅读量192 收藏
点赞数
文章标签： 运维 开发工具 python
原文链接：http://www.cnblogs.com/benjamin77/p/7868451.html
版权

1.环境准备

准备两台虚拟机

主机名

  ip

role

linux-node1

10.0.0.7

master

linux-node2

10.0.0.8

minion

 

在节点1上安装 master 和 minion

[root@linux-node1 ~]yum install salt-master salt-minion -y

 

在节点2上安装 minion

[root@linux-node2 ~]yum install  salt-minion -y

 

分别设置开机自启动

[root@linux-node1 ~]chkconfig  salt-master on

[root@linux-node1 ~]chkconfig  --add salt-master

[root@linux-node1 ~]chkconfig  salt-minion on

[root@linux-node1 ~]chkconfig  --add salt-minion

[root@linux-node2 ~]chkconfig  salt-minion on

[root@linux-node1 ~]chkconfig  --add salt-minion

 

指定master

vim /etc/salt/minion

master: 10.0.0.7

 

授权节点1和节点2

slat-key -a linux*

 

2.测试

测试 ping 节点1 和节点2

salt '*' test.ping

 

执行 cmd.run  执行bash查看负载命令

salt '*' cmd.run 'uptime'

 

设置sls文件的路径

[root@linux-node1 ~]mkdir -p /srv/salt/base

[root@linux-node1 ~]mkdir -p /srv/salt/test

[root@linux-node1 ~]mkdir -p /srv/salt/prod

 

vim /etc/salt/master

file_roots:

  base:

    - /srv/salt/base

  test:

    - /srv/salt/test

  prod:

- /srv/salt/prod

 

重启master

/etc/init.d/salt-master restart

 

编写YMAL安装Apache 并设置启动文件

cd /srv/salt

vim apache.sls

apache-install:

  pkg.installed:

    - names:

      - httpd

      - httpd-devel

 

apache-service:

  service.running:

    - name: httpd

    - enable: True

    - reload: True

 

执行状态文件

salt '*' state.sls apache

 

编写高级状态文件

vim top.sls

base:

  'linux-node2':

  - apache

 

slat '*' state.highstate   #执行高级状态 top.sls

 

3.数据系统之 Grains

salt 'linux-node1' grains.items  #查询所有键值

 

salt 'linux-node1' grains.get fqdn #查询单个主机值

 

显示所有 节点1 eth0的ip

[root@linux-node1 ~]# salt 'linux-node1' grains.get ip_interfaces:eth0

linux-node1:

    - 10.0.0.7

- fe80::20c:29ff:fe9d:57e8

 

#根据系统名称匹配执行cmd.run命令

[root@linux-node1 ~]# salt -G os:CentOS cmd.run 'w'  #-G 代表使用grains匹配

linux-node2:

     03:47:49 up  9:58,  2 users,  load average: 0.00, 0.00, 0.00

    USER     TTY      FROM              LOGIN@   IDLE   JCPU   PCPU WHAT

    root     pts/1    10.0.0.1         17:50    1:31m  0.14s  0.14s -bash

    root     pts/0    10.0.0.1         03:37    5:40   0.00s  0.00s -bash

linux-node1:

     03:47:49 up  1:35,  2 users,  load average: 0.00, 0.00, 0.00

    USER     TTY      FROM              LOGIN@   IDLE   JCPU   PCPU WHAT

    root     pts/0    10.0.0.1         02:13    1:01m  0.08s  0.01s vim top.sls

    root     pts/1    10.0.0.1         03:37    0.00s  0.52s  0.34s /usr/bin/python

 

vim /etc/salt/grains

web: nginx

salt -G web:nginx cmd.run 'w'

 

4.数据系统之 Pillar

设置pillar文件的路径

vim /etc/salt/master

pillar_roots:

  base:

    - /srv/pillar

 

mkdir /srv/pillar #创建默认pillar目录

 

/etc/init.d/salt-master restart

vim /srv/pillar/apache.sls  #使用jinja模板语言

{%if grains['os'] == 'CentOS' %}

apache: httpd

{% elif grains['os'] == 'Debian' %}

apache: apche2

{% endif %}

 

vim /srv/pillar/top.sls

base:

  '*':

- apache

 

[root@linux-node1 ~]# salt '*' pillar.items

linux-node2:

    ----------

    apache:

        httpd

linux-node1:

    ----------

    apache:

        httpd

 

配置完 pillar需要刷新 生效

[root@linux-node1 ~]salt '*' saltutil.refresh_pillar

[root@linux-node1 ~]#  salt -I 'apache:httpd' test.ping

linux-node2:

    True

linux-node1:

    True

 

http://docs.saltstack.cn/topics/index.html    #slatstack中文网站

slatstack 之远程执行  

targeting

moudles 

returners   

 

基于对模块的访问控制

[root@linux-node1 ~]vim /etc/salt/master       

client_acl:

  oldboy:                      #oldboy用户下只能使用test.ping network的所有方法

    - test.ping

    - network.*

  user01:                    

    - linux-node1*:

      - test.ping

 

权限设置   

chmod 755 /var/cache/salt /var/cache/salt/master /var/cache/salt/master/jobs /var/run/salt /var/run/salt/master

 

 

[root@linux-node1 ~]/etc/ini.d/salt-master restart

[root@linux-node1 ~]# su - oldboy

[oldboy@linux-node1 ~]$ salt '*' cmd.run 'df -h'

[WARNING ] Failed to open log file, do you have permission to write to /var/log/salt/master?

Failed to authenticate! This is most likely because this user is not permitted to execute commands, but there is a small possibility that a disk error occurred (check disk/inode usage).

 

创建表结构 3个表：

CREATE DATABASE `salt`

DEFAULT CHARACTER SET utf8

DEFAULT COLLATE utf8_general_ci;

USE `salt`;

 

CREATE TABLE `jids` (

`jid` varchar(255) NOT NULL,

`load` mediumtext NOT NULL,

UNIQUE KEY `jid` (`jid`)

) ENGINE=InnoDB DEFAULT CHARSET=utf8;

CREATE INDEX jid ON jids(jid) USING BTREE;

 

CREATE TABLE `salt_returns` (

`fun` varchar(50) NOT NULL,

`jid` varchar(255) NOT NULL,

`return` mediumtext NOT NULL,

`id` varchar(255) NOT NULL,

`success` varchar(10) NOT NULL,

`full_ret` mediumtext NOT NULL,

`alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,

KEY `id` (`id`),

KEY `jid` (`jid`),

KEY `fun` (`fun`)

) ENGINE=InnoDB DEFAULT CHARSET=utf8;

 

CREATE TABLE `salt_events` (

`id` BIGINT NOT NULL AUTO_INCREMENT,

`tag` varchar(255) NOT NULL,

`data` mediumtext NOT NULL,

`alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,

`master_id` varchar(255) NOT NULL,

PRIMARY KEY (`id`),

KEY `tag` (`tag`)

) ENGINE=InnoDB DEFAULT CHARSET=utf8;

 

授权salt用户

grant all on salt.* to salt@'10.0.0.0/255.255.255.0 identified by 'salt';

 

yum install -y MySQL-python     #同步数据依赖 MySQL-python包

vim /etc/salt/master

底部添加

master_job_cache: mysql   #加上这一句 执行的命令自动保存到数据库不用加--return mysql

mysql.host: '10.0.0.7'

mysql.user: 'salt'

mysql.pass: 'salt'

mysql.db: 'salt'

mysql.port: 3306

/etc/init.d/salt-master restart

 

测试命令执行结果是否同步到数据库

[root@linux-node1 ~]# salt '*' cmd.run 'ls' --return mysql

 

编译安装所需的依赖包

yum install gcc gcc-c++ glibc autoconf make openssl openssl-devel

 

5.web集群架构自动化部署

5.1安装haproxy

cd /usr/local/src && tar zxf haproxy-1.7.9.tar.gz && cd haproxy-1.7.9 && make TARGET=linux26 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy

cd /usr/local/src/haproxy-1.7.9/examples/

vim haproxy.init

BIN=/usr/local/haproxy/sbin/$BASENAME  更改启动脚本的默认路径

cp haproxy-init /srv/salt/prod/haproxy/files/

 

编写YMAL脚本

mkdir /srv/salt/prod/pkg            #源码安装依赖包sls

mkdir /srv/salt/prod/haproxy        #haproxy安装 sls

mkdir /srv/salt/prod/haproxy/files    #存放haproxy源码压缩包

 

haproxy自动化编译安装。

cd /srv/salt/prod/pkg

 

编译安装所需依赖包的自动化安装

vim pkg-init.sls  

pkg-init:

  pkg.installed:                 #pkg的installed

    - names:

      - gcc

      - gcc-c++

      - glibc

      - make

      - autoconf

      - openssl

      - openssl-devel

  

cd /srv/salt/prod/haproxy

vim install.sls   #haproxy自动化编译安装YMAL脚本

include:

  - pkg.pkg-init

 

haproxy-install:

  file.managed:

    - name: /usr/local/src/haproxy-1.7.9.tar.gz

    - source: salt://haproxy/files/haproxy-1.7.9.tar.gz #salt：相当于/srv/salt/prod

    - user: root

    - group: root

    - mode: 755

  cmd.run:

    - name: cd /usr/local/src && tar zxf haproxy-1.7.9.tar.gz && cd haproxy-1.7.9 && make TARGET=linux26 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy

    - unless: test -d /usr/local/haproxy

    - require:

      - pkg: pkg-init

      - file: haproxy-install

 

haproxy-init:

  file.managed:

    - name: /etc/init.d/haproxy   创建一个/etc/init.d/haproxy 文件

    - source: salt://haproxy/files/haproxy.init

    - user: root

    - group: root

    - mode: 755

    - require:

      - cmd: haproxy-install

  cmd.run:

    - name: chkconfig --add haproxy

    - unless: chkconfig --list | grep haproxy #返回false才执行和-onlyif相反，有就不执行上面的命令

    - require:

      - file: haproxy-init

net.ipv4.ip_nonlocal_bind:   #cat /proc/sys/net/ipv4/ip_nonlocal_bind 默认是0改为1，意思是可以监听非本地的ip

  sysctl.present:             #设定内核参数的方法

    - value: 1

 

haproxy-config-dir:

  file.directory:   #文件的创建目录的方法

    - name: /etc/haproxy  #创建一个/etc/haproxy的目录

    - user: root

    - group: root

    - mode: 755

 

手动执行 节点1上面的安装haproxy脚本

salt 'linux-node1' state.sls haproxy.install env=prod #env指定使用prod目录下的

 

创建集群目录

mkdir /srv/salt/prod/cluster

mkdir /srv/salt/prod/cluster/files

cd /srv/salt/prod/cluster/files

vim haproxy-outside.cfg

global

maxconn 100000

chroot /usr/local/haproxy

uid 99

gid 99

daemon

nbproc 1

pidfile /usr/local/haproxy/logs/haproxy.pid

log 127.0.0.1 local3 info

 

defaults

option http-keep-alive

maxconn 100000

mode http

timeout connect 5000ms

timeout client  50000ms

timeout server  50000ms

 

listen stats

mode http

bind 0.0.0.0:8888

stats enable

stats uri       /haproxy-status

stats auth      haproxy:saltstack

frontend frontend_www_example_com

bind    10.0.0.11:80

mode    http

option  httplog

log global

        default_backend backend_www_example_com

 

backend backend_www_example_com

option forwardfor header X-REAL-IP

option httpchk HEAD / HTTP/1.0

balance source

server web-node1        10.0.0.7:8080 check inter 2000 rise 30 fall 15

server web-node2        10.0.0.8:8080 check inter 2000 rise 30 fall 15

 

cd ..

vim haproxy-outside.sls

include:

  - haproxy.install

 

haproxy-service:

  file.managed:

    - name: /etc/haproxy/haproxy.cfg

    - source: salt://cluster/files/haproxy-outside.cfg

    - user: root

    - group: root

    - mode: 644

  service.running:

    - name: haproxy

    - enable: True

    - reload: True

    - require:

      - cmd: haproxy-init

    - watch:

      - file: haproxy-service

编辑top.sls

cd /srv/salt/base/

vim top.sls

base:

  '*':

    - init.env_init

 

prod:

  'linux-node1':

    - cluster.haproxy-outside

  'linux-node2':

    - cluster.haproxy-outside

在节点1和节点2上分别修改httpd 的监听端口

vim /etc/httpd/conf/httpd.conf 将80端口改为8080

Listen 8080  

然后重启 /etc/init.d/httpd restart

 

vim /var/www/html/index.html

linux-node1  #节点2上linux-node2

 

在浏览器中输入 10.0.0.7:8888/haproxy-status  健康检查

账号密码 haproxy/saltstack

 

[root@linux-node1 html]# cd /srv/salt/prod/

[root@linux-node1 prod]# tree

.

|-- cluster

|   |-- files

|   |   `-- haproxy-outside.cfg

|   `-- haproxy-outside.sls

|-- haproxy

|   |-- files

|   |   |-- haproxy-1.7.9.tar.gz

|   |   `-- haproxy.init

|   `-- install.sls

`-- pkg

    `-- pkg-init.sls

 

5.2安装keepalived

wget http://www.keepalived.org/software/keepalived-1.2.19.tar.gz && tar zxf keepalived-1.2.19.tar.gz && cd keepalived-1.2.19 && ./configure --prefix=/usr/local/keepalived --disable-fwmark && make && make install

/usr/local/src/keepalived-1.2.19/keepalived/etc/init.d/keepalived.init #启动脚本

/usr/local/src/keepalived-1.2.19/keepalived/etc/keepalived/keepalived.conf #模板文件

[root@linux-node1 etc]# mkdir /srv/salt/prod/keepalived

[root@linux-node1 etc]# mkdir /srv/salt/prod/keepalived/files

[root@linux-node1 etc]# cp init.d/keepalived.init /srv/salt/prod/keepalived/files/

[root@linux-node1 etc]# cp keepalived/keepalived.conf /srv/salt/prod/keepalived/files/

[root@linux-node1 keepalived]# cd /usr/local/keepalived/etc/sysconfig/

[root@linux-node1 sysconfig]# cp keepalived /srv/salt/prod/keepalived/files/keepalived.sysconfig

[root@linux-node1 etc]# cd /srv//salt/prod/keepalived/files/

[root@linux-node1 files]# vim keepalived.init

daemon /usr/local/keepalived/sbin/keepalived ${KEEPALIVED_OPTIONS} 修改启动时的加载文件路径

[root@linux-node1 files] cp /usr/local/src/keepalived-1.2.19.tar.gz .

[root@linux-node1 files]# cd ..    

[root@linux-node1 keepalived]# vim install.sls

include:

  - pkg.pkg-init

 

keepalived-install:

  file.managed:

    - name: /usr/local/src/keepalived-1.2.19.tar.gz

    - source: salt://keepalived/files/keepalived-1.2.19.tar.gz

    - user: root

    - group: root

    - mode: 755

  cmd.run:

    - name: wget http://www.keepalived.org/software/keepalived-1.2.19.tar.gz && tar zxf keepalived-1.2.19.tar.gz && cd keepalived-1.2.19 && ./configure --prefix=/usr/local/keepalived --disable-fwmark && make && make install

    - unless: test -d /usr/local/keepalived

    - require:

      - pkg: pkg-init

      - file: keepalived-install

 

keepalived-init:

  file.managed:

    - name: /etc/init.d/keepalived

    - source: salt://keepalived/files/keepalived.init

    - user: root

    - group: root

    - mode: 755

  cmd.run:

    - name: chkconfig --add keepalived

    - unless: chkconfig --list | grep keepalived

    - require:

      - file: keepalived-init

 

/etc/sysconfig/keepalived:

  file.managed:

    - source: salt://keepalived/files/keepalived.sysconfig

    - user: root

    - group: root

    - mode: 644

 

/etc/keepalived:

  file.directory:

    - user: root

    - group: root

    - mode: 755

 

[root@linux-node1 ~]# cd /srv/salt/prod/cluster/files/

[root@linux-node1 files]# vim haproxy-outside-keepalived.conf

! Configuration File for keepalived

global_defs {

   notification_email {

     saltstack@example.com

   }

   notification_email_from keepalived@example.com

   smtp_server 127.0.0.1

   smtp_connect_timeout 30

   router_id {{ROUTEID}}

}

vrrp_instance haproxy_ha {

state {{STATEID}}

interface eth0

    virtual_router_id 36

priority {{PRIORITYID}}

    advert_int 1

authentication {

auth_type PASS

        auth_pass 1111

    }

    virtual_ipaddress {

       10.0.0.11

    }

 

[root@linux-node1 cluster]# vim haproxy-outside-keepalived.sls

include:

  - keepalived.install

 

keepalived-service:

  file.managed:

    - name: /etc/keepalived/keepalived.conf

    - source: salt://cluster/files/haproxy-outside-keepalived.conf

    - user: root

    - group: root

    - mode: 644

    - template: jinja

    {% if grains['fqdn'] == 'linux-node1' %}

    - ROUTEID: haproxy_ha

    - STATEID: MASTER

    - PRIORITYID: 150

    {% elif grains['fqdn'] == 'linux-node2' %}

    - ROUTEID: haproxy_ha

    - STATEID: BACKUP

    - PRIORITYID: 100

    {% endif %}

  service.running:

    - name: keepalived

    - enable: True

    - watch:

      - file: keepalived-service

 

[root@linux-node1 cluster]salt '*' state.sls cluster.haproxy-outside-keepalived env=prod

[root@linux-node1 base]# cd /srv/salt/base/

[root@linux-node1 base]# vim top.sls

base:

  '*':

    - init.env_init

 

prod:

  'linux-node1':

    - cluster.haproxy-outside

    - cluster.haproxy-outside-keepalived

  'linux-node2':

    - cluster.haproxy-outside

    - cluster.haproxy-outside-keepalived

验证keeplivedalived

[root@linux-node1 prod]# ip ad li

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000

    link/ether 00:0c:29:9d:57:e8 brd ff:ff:ff:ff:ff:ff

    inet 10.0.0.7/24 brd 10.0.0.255 scope global eth0

    inet 10.0.0.11/32 scope global eth0

    inet6 fe80::20c:29ff:fe9d:57e8/64 scope link

       valid_lft forever preferred_lft forever

 

[root@linux-node2 html]# ip ad li

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000

    link/ether 00:0c:29:ca:41:95 brd ff:ff:ff:ff:ff:ff

    inet 10.0.0.8/24 brd 10.0.0.255 scope global eth0

    inet6 fe80::20c:29ff:feca:4195/64 scope link

       valid_lft forever preferred_lft forever    

[root@linux-node1 prod]# /etc/init.d/keepalived stop

Stopping keepalived:                                       [  OK  ]

[root@linux-node2 html]# ip ad li

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000

    link/ether 00:0c:29:ca:41:95 brd ff:ff:ff:ff:ff:ff

    inet 10.0.0.8/24 brd 10.0.0.255 scope global eth0

    inet 10.0.0.11/32 scope global eth0

    inet6 fe80::20c:29ff:feca:4195/64 scope link

       valid_lft forever preferred_lft forever

[root@linux-node1 prod]# /etc/init.d/keepalived start

Starting keepalived:                                       [  OK  ]

[root@linux-node2 html]# ip ad li

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN

    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

    inet 127.0.0.1/8 scope host lo

    inet6 ::1/128 scope host

       valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000

    link/ether 00:0c:29:ca:41:95 brd ff:ff:ff:ff:ff:ff

    inet 10.0.0.8/24 brd 10.0.0.255 scope global eth0

    inet6 fe80::20c:29ff:feca:4195/64 scope link

       valid_lft forever preferred_lft forever

[root@linux-node1 prod]# vim /srv/salt/prod/cluster/files/haproxy-outside.cfg    

balance roundrobin   #roundrobin表示轮询，source表示固定。

 

5.3安装zabbix-agent

[root@linux-node1 prod]# cd /srv/salt/base/init

[root@linux-node1 init]# vim zabbix.agent.sls

zabbix-agent-install:

  pkg.installed:

    - name: zabbix-agent

 

  file.managed:

    - name: /etc/zabbix/zabbix_agentd.conf

    - source: salt://init/files/zabbix_agent.conf

    - template: jinja

    - defaults:

      Server: {{ pillar['zabbix-agent']['Zabbix_Server'] }}

    - require:

      - pkg: zabbix-agent-install

 

  service.running:

    - name: zabbix-agent

    - enable: True

    - watch:

      - pkg: zabbix-agent-install

      - file: zabbix-agent-install

[root@linux-node1 init]# vim /etc/salt/master

pillar_roots:

  base:

    - /srv/pillar/base

[root@linux-node1 init]# mkdir /srv/pillar/base

[root@linux-node1 init]# /etc/init.d/salt-master restart

[root@linux-node1 init]# cd /srv/pillar/base/

[root@linux-node1 base]# vim top.sls

base:

  '*':

    - zabbix

[root@linux-node1 base]# vim zabbix.sls

zabbix-agent:

  Zabbix_Server: 10.0.0.7

[root@linux-node1 base]# cd /srv/salt/base/init/files

[root@linux-node1 files]# cp /etc/zabbix/zabbix_agent.conf .

[root@linux-node1 files]# vim zabbix_agent.conf  #使用模板语言的变量引用

Server={{ Server }}  

 

[root@linux-node1 init]# vim env_init.sls

include:

  - init.dns

  - init.history

  - init.audit

  - init.sysctl

  - init.zabbix_agent

[root@linux-node1 ~]# salt '*' state.highstate

 

nginx+php 以及 memcache 的安装

https://github.com/a7260488/slat-test

 

percona-zabbix-templates  #zabbix监控mysql的软件

5.4配置master-syndic

功能有点类似 zabbix-proxy

[root@linux-node2 ~]# yum install salt-master salt-syndic -y

[root@linux-node2 ~]# vim /etc/salt/master

syndic_master 10.0.0.7

[root@linux-node2 ~]# vim /etc/salt/master

[root@linux-node2 ~]# /etc/init.d/salt-master start

Starting salt-master daemon:                               [  OK  ]

[root@linux-node2 ~]# /etc/init.d/salt-syndic start

Starting salt-syndic daemon:                               [  OK  ]

[root@linux-node1 ~]# vim /etc/salt/mast

order_masters: True

[root@linux-node1 ~]# /etc/init.d/salt-master restart

[root@linux-node1 ~]# /etc/init.d/salt-minion stop

Stopping salt-minion daemon:                               [  OK  ]

[root@linux-node2 ~]# /etc/init.d/salt-minion stop

Stopping salt-minion daemon:                               [  OK  ]

[root@linux-node2 ~]# salt-key -D

[root@linux-node1 ~]# cd /etc/salt/pki/minion/

[root@linux-node1 minion]# rm -fr *

[root@linux-node1 ~]# cd  /etc/salt/pki/minion

[root@linux-node2 minion]# rm -fr *

[root@linux-node1 salt]# vim /etc/salt/minion

master 10.0.0.8

[root@linux-node1 salt]# vim /etc/salt/minion

master 10.0.0.8

[root@linux-node1 salt]# /etc/init.d/salt-minion start

Starting salt-minion daemon:                               [  OK  ]

[root@linux-node2 salt]# /etc/init.d/salt-minion start

Starting salt-minion daemon:                               [  OK  ]

[root@linux-node1 minion]# salt-key -A

The following keys are going to be accepted:

Unaccepted Keys:

linux-node2

Proceed? [n/Y] y

Key for minion linux-node2 accepted.

[root@linux-node1 minion]# salt-key

Accepted Keys:

linux-node2

Denied Keys:

Unaccepted Keys:

Rejected Keys:

[root@linux-node2 salt]# salt-key

Accepted Keys:

Denied Keys:

Unaccepted Keys:

linux-node1

linux-node2

Rejected Keys:

[root@linux-node2 salt]# salt-key -A

The following keys are going to be accepted:

Unaccepted Keys:

linux-node1

linux-node2

Proceed? [n/Y] y

Key for minion linux-node1 accepted.

Key for minion linux-node2 accepted.

 

5.5saltstack自动扩容

zabbix监控--->Action---->创建一台虚拟机/Docker容器---->部署服务---->部署代码---->测试状态----->加入集群--->加入监控--->通知

基于域名下载etcd

https://github.com/coreos/etcd/releases/download/v2.2.1/etcd-v2.2.1-linux-amd64.tar.gz

rz etcd-v2.2.1-linux-amd64.tar.gz （2进制包）

[root@linux-node1 src]# cd etcd-v2.0.5-linux-amd64

[root@linux-node1 etcd-v2.0.5-linux-amd64]# cp etcd etcdctl  /usr/local/bin/

[root@linux-node1 etcd-v2.0.5-linux-amd64] . /etcd &

或者这样启动

nohub etcd --name auto_scale --data-dir /data/etcd/ \

--listen-peer-urls 'http://10,0,0,7:2380,http://10.0.0.7:7001' \

--listen-client-urls 'http://10.0.0.7:2379,http://10.0.0.7:4001' \

--adevertise-client-urls 'http://10.0.0.7:2379,http://10.0.0.7:4001' &

设置key的值

[root@linux-node1 wal]# curl -s http://localhost:2379/v2/keys/message -XPUT -d value="Hello world" | python -m json.tool      

{

    "action": "set",

    "node": {

        "createdIndex": 8,

        "key": "/message",

        "modifiedIndex": 8,

        "value": "Hello world"

    },

    "prevNode": {

        "createdIndex": 7,

        "key": "/message",

        "modifiedIndex": 7,

        "value": "Hello world"

    }

}

获取key的值

[root@linux-node1 wal]# curl -s http://localhost:2379/v2/keys/message |python -m json.tool          {

    "action": "get",

    "node": {

        "createdIndex": 8,

        "key": "/message",

        "modifiedIndex": 8,

        "value": "Hello world"

    }

}

删除key

[root@linux-node1 wal]# curl -s http://localhost:2379/v2/keys/message -XDELETE |python -m json.tool      

{

    "action": "delete",

    "node": {

        "createdIndex": 8,

        "key": "/message",

        "modifiedIndex": 9

    },

    "prevNode": {

        "createdIndex": 8,

        "key": "/message",

        "modifiedIndex": 8,

        "value": "Hello world"

    }

}

删除key以后再次获取key not found

[root@linux-node1 wal]# curl -s http://localhost:2379/v2/keys/message |python -m json.tool          {

    "cause": "/message",

    "errorCode": 100,

    "index": 9,

    "message": "Key not found"

}

设置key 有效时间5秒 5秒后过期  "message": "Key not found"

[root@linux-node1 wal]# curl -s http://localhost:2379/v2/keys/ttl_use -XPUT -d valu=="Hello world" |"Hello world 1" -d ttl=5 |python -m json.tool        

{

    "action": "set",

    "node": {

        "createdIndex": 10,

        "expiration": "2017-11-17T12:59:41.572099187Z",

        "key": "/ttl_use",

        "modifiedIndex": 10,

        "ttl": 5,

        "value": ""

    }

}

 

[root@linux-node1 ~]# vim /etc/salt/master  #行尾添加

etcd_pillar_config:

  etcd.host: 10.0.0.7

  etcd.port: 4001

 

ext_pillar:

  - etcd: etcd_pillar_config root=/salt/haproxy/

 

[root@linux-node1 ~]# /etc/init.d/salt-master restart

[root@linux-node1 ~]# curl -s http://localhost:2379/v2/keys/salt/haproxy/backend_www_oldboyedu_com/web-node1 -XPUT -d value="10.0.0.7:8080" | python -m json.tool       

{

    "action": "set",

    "node": {

        "createdIndex": 10,

        "key": "/salt/haproxy/backend_www_oldboyedu_com/web-node1", #添加一个web-node1的节点

        "modifiedIndex": 10,

        "value": "10.0.0.7:8080"

    }

}

[root@linux-node1 ~]#pip install python-etcd

[root@linux-node1 etcd-v2.2.1-linux-amd64]# salt '*' pillar.items

linux-node2:

    ----------

    backend_www_oldboyedu_com:

        ----------

        web-node1:

            10.0.0.7:8080

    zabbix-agent:

        ----------

        Zabbix_Server:

            10.0.0.7

linux-node1:

    ----------

    backend_www_oldboyedu_com:

        ----------

        web-node1:

            10.0.0.7:8080

    zabbix-agent:

        ----------

        Zabbix_Server:

            10.0.0.7

 

[root@linux-node1 ~]# vi /srv/salt/prod/cluster/files/haproxy-outside.cfg  #行尾添加

{% for web,web_ip in pillar.backend_www_oldboyedu_com.iteritems() -%}

server {{ web }} {{ web_ip }} check inter 2000 rise 30 fall 15

{% endfor %}

vim /srv/salt/prod/cluster/haproxy-outside.sls

- template: jinja

重启master

执行状态 salt '*' statehighstate

转载于:https://www.cnblogs.com/benjamin77/p/7868451.html

weixin_30537391
关注
AI 大模型应用数据中心建设：数据中心投资与建设
AI天才研究院
11-03 834
第1章：AI大模型应用数据中心建设背景 1.1.1 数据中心建设背景 数据中心作为现代信息技术的重要基础设施，其建设和应用已成为数字经济的关键支撑。本章将探讨AI大模型应用数据中心建设的背景，包括数据中心的定义与作用、数据中心的发展历程，以及AI大模型应用对数据中心的要求
使用Python进行自动化部署
最新发布
mrdeam的博客
06-16 739
本文深入探讨了使用Python进行自动化部署的重要性，并结合了持续集成与持续部署的实践方法和代码案例进行了详细阐述。首先，我们介绍了自动化部署的好处，包括提高效率、降低错误率、增强可控性和提升一致性。然后，我们探讨了Python在自动化部署中的应用，介绍了几种常用的库和工具，并提供了使用Fabric进行远程部署的代码实例。接着，我们深入讨论了持续集成与持续部署的概念、优势和实践方法，以及与之相关的持续改进和监控的重要性。
自动化运维工具SaltStack详细部署
weixin_33816300的博客
12-28 251
==========================================================================================一、基础介绍==========================================================================================1、简...
saltstack的部署与使用
weixin_46074899的博客
09-12 334
文章目录1. saltstack的介绍1.1 saltstack的概念1.2 saltstack的通信机制1.2 saltstack的组件2. saltstack的安装与配置2.1 配置yum源2.2 配置master2.3 配置minion2.4 配置master验证minion3. saltstack远程执行3.1 salt命令的组成3.2 编写远程执行模块3.3 了解Yaml语法3.4 配置管理（sls）1.创建sls文件2.创建top文件3.使用子目录配置管理4.sls示例1）配置httpd2）配置
saltstack的安装部署及使用
weixin_41547423的博客
09-20 810
1. saltstack 1. 简介 Saltstack 比 Puppet 出来晚几年，是基于Python 开发的，也是基于 C/S 架构，服务端 master 和客户端 minions ；Saltstack 和 Puppet 很像，可以说 Saltstatck 整合了 Puppet 和 Chef 的功能，更加强大，更适合大规模批量管理服务器，并且它比 Puppet 更容易配置。 三大功能： 远程命令执行 配置管理（服务，文件，cron，用户，组） 云管理。 支持系统：大多数都支持，windows 上不
SaltStack----安装部署、远程执行、grains、pillar、Jinja模板
qq_38664479的博客
08-05 932
目录一、Saltstack安装部署1.安装配置2.连接测试二、远程执行shell命令1.salt命令2.sls文件 一、Saltstack安装部署 简介： 1、saltstack是一个配置管理系统，能够维护预定义状态的远程节点，它也是一个分布式远程执行系统，用来在远程节点上执行命令和查询数据。 2、SaltStack基于Python语言实现，结合轻量级消息队列（ZeroMQ）与Python第三方模块（Pyzmq、PyCrypto、Pyjinjia2、python-msgpack和PyYAML等）构建。 3、
自动化运维工具--saltstack部署及使用
云计算之路
07-25 3401
介绍saltstack的安装连接及使用
Ubuntu专业版案例分析：企业应用部署到运维的最佳实践
[Ubuntu专业版案例分析：企业应用部署到运维的最佳实践](https://www.palantir.com/docs/resources/foundry/data-connection/agent-requirements.png?width=600px) # 1. Ubuntu专业版概述与企业应用 ## Ubuntu专业...
DHCP及cobbler系统自动化部署
FlamencaH的博客
06-15 3094
系统自动化系统部署 系统安装过程 # CentOS系统安装 系统启动流程： bootloader --> kernel(initramfs) --> rootfs --> /sbin/init system-config-kickstart工具 下载安装system-config-kickstart [root@localhost ~]#yum install system-config-kickstart -y 运行system-config-kickst
ansible copy模块_ansible超详细讲解，值得收藏
weixin_39612817的博客
11-21 2756
如果做过运维或者网站开发的朋友，一定接触过服务部署，那么一般的服务部署流程是什么呢？找一台Linux机器，安装好运行环境所需要的软件，然后把服务部署上去。一台机器可以这么做，如果是集群呢？每一台都要这么做。假如我们管理了几百台机器，突然有一天公司要求在所有机器上都安装某一款软件，那么手动显然是不行的，这个时候就必须要借助自动化脚本来完成这项任务了。自动化执行的方式有很多种，最原始的就是shell脚...
saltstack: salt-2018.3.0.tar.gz
06-01
这是saltstack最新的源码包， salt-2018.3.0.tar.gz 可以解压后安装
搭建salt管理主机+git代码版本管理+Jenkins脚本管理---统一管理环境 第一篇 salt相关安装安装配置
weixin_39762926的博客
07-05 745
前提条件：    安装对应的虚拟机、或者主机服务器，进行ip配置，主机名修改（这里就不做介绍了）安装salt-master 和salt-minion主机比较少的话，可以手动配置，这里不做介绍，只操作主机比较多的情形：    主机多，不方便手动一台一台安装salt-minion，因为太费时费事，，这里通过salt-ssh安装salt-minion我这里使用演示主机为：    zk_vm_1     ...
python log日志_Python的log日志功能及设置方法
weixin_39828783的博客
11-29 317
引入：Python中有个logging模块可以完成相关信息的记录，在debug时用它往往事半功倍一、日志级别(从低到高)：DEBUG :详细的信息,通常只出现在诊断问题上INFO:确认一切按预期运行WARNING:一个迹象表明,一些意想不到的事情发生了,或表明一些问题在不久的将来(例如。磁盘空间低”)。这个软件还能按预期工作。ERROR:更严重的问题,软件没能执行一些功能CRITICAL :一个严...
编译运行无故出现 Cannot open output file：Permission denied可尝试的解决办法
热门推荐
blog of hbj
06-25 5万+
解决：资源管理--杀死、结束相关进程
Warning fopen failed to open stream(权限问题已解决)
tongtongsong的博客
05-14 1万+
问题： Warning: fopen(access_token.json): failed to open stream: Permission denied in Warning: fopen(jsapi_ticket.json): failed to open stream: Permission denied in 原因：权限问题（文件读写执行权限）！ ...
ERROR: failed to open error_log (/usr/var/log/php-fpm.log)
zhengwish的专栏
02-26 1万+
原文地址：http://blog.csdn.net/dracotianlong/article/details/21882915Mac OS X 10.9已经自带有php-fpm，对于有干净系统强迫症的人，可以用brewhome重装一遍。     直接在mac下执行php-fpm，会出现以下的错[plain] view plain copyDraco:etc root# php-fpm  [23-...
Saltack 针对用户进行权限控制
weixin_30707875的博客
06-12 243
一、client_acl配置使用 1.1 client_acl概述 开启对系统上非root的系统用户在master上执行特殊的模块，这些模块名可以使用正则表达式进行表示，不能指定对那些minion执行命令。执行命令只需要切换到具体的用户即可，不需要认证。 1.2开启配置 创建test用户并设置密码，此处的test用户为Linux系统用户。 开启方式：vim /etc/salt/mas...
Salt 权限控制
weixin_33755557的博客
06-04 535
2019独角兽企业重金招聘Python工程师标准>>> ...
VMware16 安装Mac 10.14系统/苹果系统
xiaogui_666的博客
06-20 4万+
VMware16 安装Mac 10.14系统/苹果系统
saltstack 安装部署
08-30
- *2* [SaltStack的安装及简单部署](https://blog.csdn.net/weixin_42446031/article/details/92769652)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值