Saltstack_使用指南14_无master

1. 主机规划

salt 版本

 [root@salt100 ~]# salt --version
 salt 2018.3. (Oxygen)
 [root@salt100 ~]# salt-minion --version
 salt-minion 2018.3. (Oxygen)

salt 无master文档

standalone_minion

https://docs.saltstack.com/en/latest/topics/tutorials/standalone_minion.html

salt-call

https://docs.saltstack.com/en/latest/ref/cli/salt-call.html    

注意★★★★★

当salt处于无master【masterless】模式时，不要运行salt-minion守护进程。否则salt-minion将尝试去连接master并失败。salt-call命令独立存在，不需要salt-minion守护进程。

2. 无master操作步骤

备注：此次是在salt01上操作

1、关闭salt-minion、关闭开机自启动

 systemctl stop salt-minion.service
 systemctl disable salt-minion.service    

2、minion端配置修改

 [root@salt01 ~]# vim /etc/salt/minion
 ………………
 # Set the file client. The client defaults to looking on the master server for
 # files, but can be directed to look at the local file directory setting
 # defined below by setting it to "local". Setting a local file_client runs the
 # minion in masterless mode.
 #file_client: remote
 file_client: local  # 从默认的 remote改为local
 ………………

备注：salt-call 会读取该配置文件，因此该配置文件必须改。

3、file_roots和pillar_roots设置

使用默认的即可，不需要设置

4、External pillars设置

无master模式支持External pillars

3. 无master模式测试

3.1. 常规信息

 [root@salt01 ~]# salt-call  test.ping
 local:
     True
 [root@salt01 ~]# salt-call grains.items  # 查看所有grains信息

3.2. grains设置

 [root@salt01 ~]# vim /etc/salt/minion
 ………………
 # Custom static grains for this minion can be specified here and used in SLS
 # files just like all other grains. This example sets  custom grains, with
 # the 'roles' grain having two values that can be matched against.
 grains:
   roles:
     - webserver03
     - memcache03
   os: redhat03
   tree: tree001
 ………………
 [root@salt01 ~]# salt-call saltutil.sync_grains  # 刷新 grains【实际可以不进行此操作，因为是本地读取】
 local:
 ##### 查看grains结果
 [root@salt01 ~]# salt-call grains.item tree
 local:
     ----------
     tree:
         tree001
 [root@salt01 ~]# salt-call grains.item roles
 local:
     ----------
     roles:
         - webserver03
         - memcache03
 [root@salt01 ~]# salt-call grains.item roles:  # 读取列表中的下标为1的数据
 local:
     ----------
     roles::
         memcache03

3.3. pillar设置

 [root@salt01 pillar]# pwd
 /srv/pillar
 [root@salt01 pillar]# cat top.sls
 base:
   '*':
     - web_pillar.user
 [root@salt01 pillar]# cat web_pillar/user.sls
 tree:
   tree01:
     - name01: zhang01
     - name02: zhang02
   tree02:
     - my_user1: salt0-
     - my_user2: salt0-
 [root@salt01 ~]# salt-call saltutil.sync_pillar  # 刷新【实际可以不进行此操作，因为是本地读取】
 local:
 ###### pillar数据查询
 [root@salt01 ~]# salt-call pillar.items
 local:
     ----------
     tree:
         ----------
         tree01:
             |_
               ----------
               name01:
                   zhang01
             |_
               ----------
               name02:
                   zhang02
         tree02:
             |_
               ----------
               my_user1:
                   salt0-
             |_
               ----------
               my_user2:
                   salt0-
 [root@salt01 ~]# salt-call pillar.item tree:tree01
 local:
     ----------
     tree:tree01:
         |_
           ----------
           name01:
               zhang01
         |_
           ----------
           name02:
               zhang02
 [root@salt01 ~]# salt-call pillar.item tree:tree01:name01
 local:
     ----------
     tree:tree01:name01:
         zhang01

注意这几个的区别【取列表信息】

 [root@salt01 pillar]# salt-call pillar.item tree:tree01
 local:
     ----------
     tree:tree01:
         |_
           ----------
           name01:
               zhang01
         |_
           ----------
           name02:
               zhang02
 [root@salt01 pillar]# salt-call pillar.item tree:tree01:
 local:
     ----------
     tree:tree01::
         ----------
         name01:
             zhang01
 [root@salt01 pillar]# salt-call pillar.item tree:tree01:name01
 local:
     ----------
     tree:tree01:name01:
         zhang01
 [root@salt01 pillar]# salt-call pillar.item tree:tree01::name01
 local:
     ----------
     tree:tree01::name01:
         zhang01

———————————————END———————————————