saltstack--状态判断unless与onlyif

saltstack状态判断unless与onlyif

很多时候我们在编写 state 文件时候需要进行判断，判断该目录或文件是否存在，判断该配置是否已经已添加，然后根据判断结果再决定命令或动作是否执行，这时候就需要用到了状态判断的unless和onlyif。

unless

unless示例：需求创建/tmp/unless.txt文件，存在则不创建，不存在则创建

[root@salt-master ~]# cat /srv/salt/prod/unless.sls
test-unless:
  cmd.run:
    - name: touch /tmp/unless.txt
    - unless: test -f /tmp/unless.txt

[root@salt-master ~]# salt 'salt-minion01' state.sls unless saltenv=prod
salt-minion01:
----------
          ID: test-unless
    Function: cmd.run
        Name: touch /tmp/unless.txt
      Result: True
     Comment: Command "touch /tmp/unless.txt" run
     Started: ::51.522319
    Duration: 31.822 ms
     Changes:
              ----------
              pid:

              retcode:

              stderr:
              stdout:

Summary for salt-minion01
------------
Succeeded:  (changed=)
Failed:
------------
Total states run:
Total run time:  31.822 ms
#上面第一次执行，可以看到发生了一次更改，创建了 /tmp/unless.txt文件

[root@salt-master ~]# salt 'salt-minion01' state.sls unless saltenv=prod
salt-minion01:
----------
          ID: test-unless
    Function: cmd.run
        Name: touch /tmp/unless.txt
      Result: True
     Comment: unless condition is true
     Started: ::40.819789
    Duration: 10.477 ms
     Changes:   

Summary for salt-minion01
------------
Succeeded:
Failed:
------------
Total states run:
Total run time:  10.477 ms
#第二次执行，可以看到该文件已经存在，并没有再次创建

通过上面的小案例可以看出，当unless返回为真则不执行，当unless返回为假才执行。

onlyif

onlyif正好和unless相反，当onlyif返回为真执行，当onlyif返回为假不执行

onlyif示例：需求，当/tmp/onlyif.txt文件存在，则创建/tmp/onlyif目录，不存在，则不创建/tmp/onlyif目录

[root@salt-master ~]# cat /srv/salt/prod/onlyif.sls
test-onlyif:
  cmd.run:
    - name: mkdir /tmp/onlyif
    - onlyif: test -f /tmp/onlyif.txt

[root@salt-master ~]# salt 'salt-minion01' state.sls onlyif saltenv=prod
salt-minion01:
----------
          ID: test-onlyif
    Function: cmd.run
        Name: mkdir /tmp/onlyif
      Result: True
     Comment: onlyif condition is false
     Started: ::56.460583
    Duration: 9.612 ms
     Changes:   

Summary for salt-minion01
------------
Succeeded:
Failed:
------------
Total states run:
Total run time:   9.612 ms

#通过上面可以看到，由于/tmp/onlyif.txt文件不存在，并没有创建；手动创建一个/tmp/onlyif.txt文件再次执行
[root@salt-master ~]# salt 'salt-minion01' cmd.run "touch /tmp/onlyif.txt"
salt-minion01:
[root@salt-master ~]# salt 'salt-minion01' state.sls onlyif saltenv=prod
salt-minion01:
----------
          ID: test-onlyif
    Function: cmd.run
        Name: mkdir /tmp/onlyif
      Result: True
     Comment: Command "mkdir /tmp/onlyif" run
     Started: ::07.712492
    Duration: 14.646 ms
     Changes:
              ----------
              pid:

              retcode:

              stderr:
              stdout:

Summary for salt-minion01
------------
Succeeded:  (changed=)
Failed:
------------
Total states run:
Total run time:  14.646 ms

#可以看到上面我们手动创建了一个/tmp/onlyif.txt文件后再次执行，则发生了改变，在/tmp/创建了onlyif目录

Redis主从架构案例

说明：该案例在prod环境配置

1）环境准备，定义file_roots环境

[root@salt-master ~]# vim /etc/salt/master
file_roots:
  base:
    - /srv/salt/base
  dev:
    - /srv/salt/dev
  prod:
    - /srv/salt/prod

2）创建对应环境目录

[root@salt-master ~]# mkdir -p /srv/salt/{base,dev,prod}
[root@salt-master ~]# mkdir -p /srv/salt/prod/redis/files/

3）编写state sls状态文件

#初始化redis（安装和基本配置）
[root@salt-master ~]# cat /srv/salt/prod/redis/init.sls
redis-install:
  pkg.installed:
    - name: redis

redis-config:
  file.managed:
    - name: /etc/redis.conf
    - source: salt://redis/files/redis.conf
    - user: root
    - group: root
    - mode:
    - template: jinja
    - defaults:
      BIND: {{ grains['fqdn_ip4'][] }}
      PORT:
      DAEMONIZA: 'yes'
    - require:
      - pkg: redis-install

redis-service:
  service.running:
    - name: redis
    - enable: True
    - watch:
      - file: redis-config

#master直接引入 init
[root@salt-master ~]# cat /srv/salt/prod/redis/master.sls
include:
  - redis.init

#slave引入init 并配置主从信息
[root@salt-master ~]# cat /srv/salt/prod/redis/slave.sls
include:
  - redis.init

#配置主从
slave-config:
  cmd.run:
    - name: redis-cli -h 192.168.1.34 slaveof 192.168.1.33
    - unless: redis-cli -h 192.168.1.34 info |grep role:slave
    - require:
      - service: redis-service

说明：
unless：返回为真则不执行，反之为假则执行

4）配置文件准备

[root@salt-master ~]# grep "^[a-Z]" /etc/redis.conf  >>/srv/salt/prod/redis/files/redis.conf
[root@salt-master ~]# cat /srv/salt/prod/redis/files/redis.conf
#这里使用jinja
bind {{ BIND }}
protected-mode yes
#这里使用jinja
port {{ PORT }}
tcp-backlog
timeout
tcp-keepalive
#这里使用jinja
daemonize {{ DAEMONIZA }}
supervised no
pidfile /var/run/redis_6379.pid
loglevel notice
logfile /var/log/redis/redis.log
databases
save
save
save
stop-writes-on-bgsave-error yes
rdbcompression yes
rdbchecksum yes
dbfilename dump.rdb
dir /var/lib/redis
slave-serve-stale-data yes
slave-read-only yes
repl-diskless-sync no
repl-diskless-sync-delay
repl-disable-tcp-nodelay no
slave-priority
appendonly no
appendfilename "appendonly.aof"
appendfsync everysec
no-appendfsync-on-rewrite no
auto-aof-rewrite-percentage
auto-aof-rewrite-min-size 64mb
aof-load-truncated yes
lua-time-limit
slowlog-log-slower-than
slowlog-max-len
latency-monitor-threshold
notify-keyspace-events ""
hash-max-ziplist-entries
hash-max-ziplist-value
list-max-ziplist-size -
list-compress-depth
set-max-intset-entries
zset-max-ziplist-entries
zset-max-ziplist-value
hll-sparse-max-bytes
activerehashing yes
client-output-buffer-limit normal
client-output-buffer-limit slave 256mb 64mb
client-output-buffer-limit pubsub 32mb 8mb
hz
aof-rewrite-incremental-fsync yes

5）top file文件编写

[root@salt-master ~]# cat /srv/salt/base/top.sls
prod:
  'salt-minion02':
    - redis.master
  'salt-minion03':
    - redis.slave

6）整体state文件查看

[root@salt-master ~]# tree /srv/salt/prod/redis/
/srv/salt/prod/redis/
├── files
│   └── redis.conf
├── init.sls
├── master.sls
└── slave.sls

 directory,  files

7）top file高级状态执行

#先测试下看下状态文件是否编写正确，再正式执行
[root@salt-master ~]# salt '*' state.highstate test=True
[root@salt-master ~]# salt '*' state.highstate

saltstack快速入门

saltstack远程执行

saltstack配置管理

saltstack数据系统

saltstack使用salt-ssh