saltstack的JINJIA模块应用

	[root@server1 salt]# pwd
	/srv/salt
	[root@server1 salt]# cd httpd/
	[root@server1 httpd]# vim service.sls 
	[root@server1 httpd]# cat service.sls 
	include:
	  - httpd.install
	
	/etc/httpd/conf/httpd.conf:
	  file.managed:
	    - source: salt://httpd/files/httpd.conf
	    - template: jinja
	      port: 8080
	
	httpd-service:
	  service.running:
	    - name: httpd
	    - enable: False
	    - reload: True
	      watch:
	        - file: /etc/httpd/conf/httpd.conf
	
	[root@server1 httpd]# cd files/
	[root@server1 files]# vim httpd.conf 
	Listen  {{ port }}
	
	[root@server1 httpd]# salt server2 state.sls httpd.service
	
	[root@server2 salt]# netstat -antlp

端口变为8080

[root@server1 httpd]# cat service.sls 
include:
  - httpd.install

/etc/httpd/conf/httpd.conf:
  file.managed:
    - source: salt://httpd/files/httpd.conf
    - template: jinja
      port: 8080
      host: 172.25.19.2
      ##host: {{ grains['ipv4'][-1] }}      选一种即可
httpd-service:
  service.running:
    - name: httpd
    - enable: False
    - reload: True
      watch:
        - file: /etc/httpd/conf/httpd.conf

Listen  {{ host }}:{{ port }}

[root@server2 salt]# systemctl restart httpd
[root@server2 salt]# netstat -antlp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 172.25.19.2:8080        0.0.0.0:*               LISTEN      3878/httpd  

[root@server1 ~]# cd /srv/pillar/
[root@server1 pillar]# vim web.sls 
[root@server1 pillar]# cat web.sls 
{% if grains['fqdn'] == 'server2' %}
webserver: httpd
IP: 172.25.19.2
{% elif grains['fqdn'] == 'server3' %}
webserver: nginx
IP: 172.25.19.3 
{% endif %}

  
[root@server1 httpd]# pwd
/srv/salt/httpd
[root@server1 httpd]# cat service.sls 
include:
  - httpd.install

/etc/httpd/conf/httpd.conf:
  file.managed:
    - source: salt://httpd/files/httpd.conf
    - template: jinja
      port: 80
      host: {{ pillar['IP'] }}

httpd-service:
  service.running:
    - name: httpd
    - enable: False
    - reload: True
      watch:
        - file: /etc/httpd/conf/httpd.conf

[root@server1 httpd]# salt server2 state.sls httpd.service
[root@server2 ~]# netstat -antlp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 172.25.19.2:80          0.0.0.0:*               LISTEN      1143/httpd

优先级

[root@server1 httpd]# vim lib.sls    ##优先级高
{% set host = '172.25.19.2' %}

[root@server1 files]# vim httpd.conf
{% from 'httpd/lib.sls' import test %}
host: 127.0.0.1
[root@server1 httpd]# salt server2 state.sls httpd.service

[root@server2 ~]# netstat -antlp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.1:80            0.0.0.0:*               LISTEN      1143/httpd 

[root@server1 nginx]# cat install.sls
{% set nginx_ver = ‘1.15.8’ %}

nginx-install:
pkg.installed:
- pkgs:
- pcre-devel
- zlib-devel
- gcc
- make

file.managed:
- name: /mnt/nginx-{{ nginx_ver }}.tar.gz
- source: salt://nginx/files/nginx-{{ nginx_ver }}.tar.gz

cmd.run:
- name: cd /mnt && tar zxf nginx-{{ nginx_ver }}.tar.gz && cd nginx-{{ nginx_ver }} && sed -i ‘s/CFLAGS=“KaTeX parse error: Expected 'EOF', got '#' at position 12: CFLAGS -g"/#̲CFLAGS="CFLAGS -g”/g’ auto/cc/gcc && ./configure --prefix=/usr/local/nginx &> /dev/null && make &> /dev/null && make install &> /dev/null && cd … && rm -fr nginx-{{ nginx_ver }}
- creates: /usr/local/nginx
[root@server1 nginx]# cat service.sls
include:

• nginx.install
• users.nginx

/usr/local/nginx/conf/nginx.conf:
file.managed:
- source: salt://nginx/files/nginx.conf
- template: jinja
nginx-service:
file.managed:
- name: /etc/systemd/system/nginx.service
- source: salt://nginx/files/nginx.service

service.running:
- name: nginx
- reload: True
- watch:
- file: /usr/local/nginx/conf/nginx.conf

[root@server3 mnt]# ls
nginx-1.15.8.tar.gz
[root@server3 mnt]# rm -fr *
再次推送就过来了
[root@server1 nginx]# salt server3 state.sls nginx.service
[root@server3 mnt]# ls
nginx-1.15.8.tar.gz