且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

salt reactor 自动完成Minion的证书签发和根据不同的业务完成不同states配置

更新时间:2022-10-13 17:18:29


1
2
3
4
5
6
7
8
9
10
11
12
cat /etc/salt/master
file_roots:
  base:
    - /srv/salt/base
  prod:
    - /srv/salt/prod
interface: 192.168.1.100
reactor:
    - 'salt/auth':
        - /srv/reactor/Minion.sls
    - 'salt/minion/Minion/start':
        - /srv/reactor/auto.sls
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
auto.sls
run_state:
    local.state.sls:
        - tgt: {{ data['id'] }}
        - arg:
            - shencan
run_init:
    local.cmd.run:
        - tgt: {{ data['id'] }}
        - arg:
            - echo initsok >>/tmp/cpis
Minion.sls
{% if 'act' in data and data['act'== 'pend' %}
minion_add:
  wheel.key.accept:
    - match: {{ data['id'] }}
{% endif %}
 
shencan.sls  这个位置/srv/salt/base
/tmp/example:
    file.managed:
        - source: salt://example
1
2
3
cat minion
master: 192.168.1.100
id: Minion


客户端启动后自动签发


具体看书


http://www.51niux.com/?id=120  SaltStack系列(五)之各种组件

https://docs.saltstack.com/en/latest/topics/reactor/

1
2
3
4
5
6
7
8
9
10
11
12
更新
file_roots:
  base:
    - /srv/salt/base
  prod:
    - /srv/salt/prod
interface: 192.168.1.100
reactor:
    - 'salt/auth':
        - /srv/reactor/auth.sls
    - 'salt/minion/*/start':
        - /srv/reactor/auto.sls



本文转自 liqius 51CTO博客,原文链接:http://blog.51cto.com/szgb17/1957214,如需转载请自行联系原作者