SaltStack自动化安装配置haproxy

准备环境
node1:192.168.217.149 （saltstack master）
node2：192.168.217.150（saltstack minion）
下载haproxy1.6.2.tar.gz
下载地址：http://www.haproxy.org/download/1.6/src/

在node1:192.168.217.149 （saltstack master）上操作配置模块

一、依赖安装模块
1、pkg.installed的路径相对于prod在/etc/salt/master中配置的相对路径

mkdir /srv/salt/prod/
mkdir /srv/salt/prod/haproxy/files -pv
mkdir mkdir /srv/salt/prod/pkg/files -pv
cd /srv/salt/prod/pkg

2、编写依赖包配置文件

vim pkg-init.sls

vim pkg-init.sls
pkg-init:
  pkg.installed:
    - names:
      - gcc
      - gcc-c++
      - glibc
      - make
      - autoconf
      - openssl
      - openssl-devel

二、编写HAproxy状态模块　

如何配置状态模块
手动编译安装一遍haproxy，记录安装步骤
1、haproxy编译安装

yum install gcc gcc-c++ glibc make autoconf openssl openssl-devel
cd /usr/local/src
tar -zxf haproxy-1.6.2.tar.gz
make TARGET=linux26 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy

2、将配置文件、启动文件复制到/srv/salt/prod/haproxy/files下

step1：
mv haproxy-1.6.2.tar.gz /srv/salt/prod/haproxy/files/
cd /srv/salt/prod/haproxy/files/
tar zxf haproxy-1.6.2.tar.gz
cd haproxy-1.6.2/examples/
vim haproxy.init
BIN=/usr/local/haporxy/sbin/$BASENAME
step2：
cp haproxy.init /srv/salt/prod/haproxy/files/
step3：
cd /srv/salt/prod/haproxy/files
rm -rf haproxy-1.6.2

3、编写install.sls
此文件不写haproxy的配置文件，是为了解耦。因为安装和启动时原子操作，在哪都必须，但是配置文件，在不同环境下是不一样的

vim install.sls

include:
  - pkg.pkg-init

haproxy-install:
  file.managed:
    - name: /usr/local/src/haproxy-1.6.2.tar.gz
    - source: salt://haproxy/files/haproxy-1.6.2.tar.gz
    - user: root
    - group: root
    - mode: 755
  cmd.run:
    - name: cd /usr/local/src && tar zxf haproxy-1.6.2.tar.gz && cd haproxy-1.6.2 && make TARGET=linux26 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy
    - unless: test -d /usr/local/haproxy
    - require:
      - pkg: pkg-init
      - file: haproxy-install

haproxy-init:
  file.managed:
    - name: /etc/init.d/haproxy
    - source: salt://haproxy/files/haproxy.init
    - user: root
    - group: root
    - mode: 755
    - require:
      - cmd: haproxy-install
  cmd.run:
    - name: chkconfig --add haproxy
    - unless: chkconfig --list | grep haproxy
    - require:
      - file: /etc/init.d/haproxy

net.ipv4.ip_nonlocal_bind:
  sysctl.present:
    - value: 1

haproxy-config-dir:
  file.directory:
    - name: /etc/haproxy
    - user: root
    - group: root
    - mode: 755

提示：
1、如果是拷贝配置文件，确保$符号和配置之间没有空格，不然执行会出错，vim下，使用set list命令可以查看
2、层级关系是2、4、6个空格
建议先执行测试然后再实际配置修改，命令如下：
# salt '*' state.sls haproxy.install env=prod test=True

三、编写业务引用

1、haproxy配置文件

mkdir -p /srv/salt/prod/cluster/files
cd /srv/salt/prod/cluster/files/

vim /srv/salt/prod/cluster/files/haproxy-outside.cfg

global
maxconn 100000
chroot /usr/local/haproxy
uid 99
gid 99
daemon
nbproc 1
pidfile /usr/local/haproxy/logs/haproxy.pid
log 127.0.0.1 local3 info
defaults
option http-keep-alive
maxconn 100000
mode http
timeout connect 5000ms
timeout client 50000ms
timeout server 50000ms
listen stats
mode http
bind 0.0.0.0:8888
stats enable
stats uri /haproxy-status
stats auth haproxy:saltstack
frontend frontend_www_example_com
bind 192.168.3.11:80
mode http
option httplog
log global
default_backend backend_www_example_com
backend backend_www_example_com
option forwardfor header X-REAL-IP
option httpchk HEAD / HTTP/1.0
balance source
server web-node1 192.168.217.149:8080 check inter 2000 rise 30 fall 15
server web-node2 192.168.217.150:8080 check inter 2000 rise 30 fall 15

cd /srv/salt/prod/cluster/
vim /srv/salt/prod/cluster/haproxy-outside.sls

include:
  - haproxy.install

haproxy-service:
  file.managed:
    - name: /etc/haproxy/haproxy.cfg
    - source: salt://cluster/files/haproxy-outside.cfg
    - user: root
    - group: root
    - mode: 644
  service.running:
    - name: haproxy
    - enable: True
    - reload: True
    - require:
      - cmd: haproxy-init
    - watch:
      - file: haproxy-service

2、编写top.sls

cd /srv/salt/base/
vim top.sls

base:
  '*':
    - init.env_init
prod:
  "node1":
    - cluster.haproxy-outside
  "node2":
    - cluster.haproxy-outside

三、执行安装配置

salt '*' state.highstate

四、Web查看服务状态
从web登陆192.168.217.149:8888/haproxy-status

用户名和密码在/srv/salt/prod/cluster/files/haproxy-outside.cfg中

grep 'auth' /srv/salt/prod/cluster/files/haproxy-outside.cfg
stats auth haproxy:saltstack

界面如下：