超详细saltstack安装部署及应用
1.环境准备准备两台虚拟机
主机名
ip
role
linux-node1
10.0.0.7
master
linux-node2
10.0.0.8
minion
在节点1上安装 master 和 minion
yum install salt-master salt-minion -y
在节点2上安装 minion
yum installsalt-minion -y
分别设置开机自启动
chkconfigsalt-master on
chkconfig--add salt-master
chkconfigsalt-minion on
chkconfig--add salt-minion
chkconfigsalt-minion on
chkconfig--add salt-minion
指定master
vim /etc/salt/minion
master: 10.0.0.7
授权节点1和节点2
slat-key -a linux*
2.测试
测试 ping 节点1 和节点2
salt '*' test.ping
执行 cmd.run执行bash查看负载命令
salt '*' cmd.run 'uptime'
设置sls文件的路径
mkdir -p /srv/salt/base
mkdir -p /srv/salt/test
mkdir -p /srv/salt/prod
vim /etc/salt/master
file_roots:
base:
- /srv/salt/base
test:
- /srv/salt/test
prod:
- /srv/salt/prod
重启master
/etc/init.d/salt-master restart
编写YMAL安装Apache 并设置启动文件
cd /srv/salt
vim apache.sls
apache-install:
pkg.installed:
- names:
- httpd
- httpd-devel
apache-service:
service.running:
- name: httpd
- enable: True
-> 执行状态文件
salt '*' state.sls apache
编写高级状态文件
vim top.sls
base:
'linux-node2':
- apache
slat '*' state.highstate #执行高级状态 top.sls
3.数据系统之 Grains
salt 'linux-node1' grains.items#查询所有键值
salt 'linux-node1' grains.get fqdn #查询单个主机值
显示所有 节点1 eth0的ip
# salt 'linux-node1' grains.get ip_interfaces:eth0
linux-node1:
- 10.0.0.7
- fe80::20c:29ff:fe9d:57e8
#根据系统名称匹配执行cmd.run命令
# salt -G os:CentOS cmd.run 'w'#-G 代表使用grains匹配
linux-node2:
03:47:49 up9:58,2 users,load average: 0.00, 0.00, 0.00
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
root pts/1 10.0.0.1 17:50 1:31m0.14s0.14s -bash
root pts/0 10.0.0.1 03:37 5:40 0.00s0.00s -bash
linux-node1:
03:47:49 up1:35,2 users,load average: 0.00, 0.00, 0.00
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
root pts/0 10.0.0.1 02:13 1:01m0.08s0.01s vim top.sls
root pts/1 10.0.0.1 03:37 0.00s0.52s0.34s /usr/bin/python
vim /etc/salt/grains
web: nginx
salt -G web:nginx cmd.run 'w'
4.数据系统之 Pillar
设置pillar文件的路径
vim /etc/salt/master
pillar_roots:
base:
- /srv/pillar
mkdir /srv/pillar #创建默认pillar目录
/etc/init.d/salt-master restart
vim /srv/pillar/apache.sls#使用jinja模板语言
{%if grains['os'] == 'CentOS' %}
apache: httpd
{% elif grains['os'] == 'Debian' %}
apache: apche2
{% endif %}
vim /srv/pillar/top.sls
base:
'*':
- apache
# salt '*' pillar.items
linux-node2:
----------
apache:
httpd
linux-node1:
----------
apache:
httpd
配置完 pillar需要刷新 生效
salt '*' saltutil.refresh_pillar
#salt -I 'apache:httpd' test.ping
linux-node2:
True
linux-node1:
True
http://docs.saltstack.cn/topics/index.html #slatstack中文网站
slatstack 之远程执行
targeting
moudles
returners
基于对模块的访问控制
vim /etc/salt/master
client_acl:
oldboy: #oldboy用户下只能使用test.ping network的所有方法
- test.ping
- network.*
user01:
- linux-node1*:
- test.ping
权限设置
chmod 755 /var/cache/salt /var/cache/salt/master /var/cache/salt/master/jobs /var/run/salt /var/run/salt/master
/etc/ini.d/salt-master restart
# su - oldboy
$ salt '*' cmd.run 'df -h'
Failed to open log file, do you have permission to write to /var/log/salt/master?
Failed to authenticate! This is most likely because this user is not permitted to execute commands, but there is a small possibility that a disk error occurred (check disk/inode usage).
创建表结构 3个表：
CREATE DATABASE `salt`
DEFAULT CHARACTER SET utf8
DEFAULT COLLATE utf8_general_ci;
USE `salt`;
CREATE TABLE `jids` (
`jid` varchar(255) NOT NULL,
`load` mediumtext NOT NULL,
UNIQUE KEY `jid` (`jid`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
CREATE INDEX jid ON jids(jid) USING BTREE;
CREATE TABLE `salt_returns` (
`fun` varchar(50) NOT NULL,
`jid` varchar(255) NOT NULL,
`return` mediumtext NOT NULL,
`id` varchar(255) NOT NULL,
`success` varchar(10) NOT NULL,
`full_ret` mediumtext NOT NULL,
`alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
KEY `id` (`id`),
KEY `jid` (`jid`),
KEY `fun` (`fun`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
CREATE TABLE `salt_events` (
`id` BIGINT NOT NULL AUTO_INCREMENT,
`tag` varchar(255) NOT NULL,
`data` mediumtext NOT NULL,
`alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
`master_id` varchar(255) NOT NULL,
PRIMARY KEY (`id`),
KEY `tag` (`tag`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
授权salt用户
grant all on salt.* to salt@'10.0.0.0/255.255.255.0> yum install -y MySQL-python #同步数据依赖 MySQL-python包
vim /etc/salt/master
底部添加
master_job_cache: mysql #加上这一句 执行的命令自动保存到数据库不用加--return mysql
mysql.host: '10.0.0.7'
mysql.user: 'salt'
mysql.pass: 'salt'
mysql.db: 'salt'
mysql.port: 3306
/etc/init.d/salt-master restart
测试命令执行结果是否同步到数据库
# salt '*' cmd.run 'ls' --return mysql
编译安装所需的依赖包
yum install gcc gcc-c++ glibc autoconf make openssl openssl-devel
5.web集群架构自动化部署
5.1安装haproxy
cd /usr/local/src && tar zxf haproxy-1.7.9.tar.gz && cd haproxy-1.7.9 && make TARGET=linux26 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy
cd /usr/local/src/haproxy-1.7.9/examples/
vim haproxy.init
BIN=/usr/local/haproxy/sbin/$BASENAME更改启动脚本的默认路径
cp haproxy-init /srv/salt/prod/haproxy/files/
编写YMAL脚本
mkdir /srv/salt/prod/pkg #源码安装依赖包sls
mkdir /srv/salt/prod/haproxy #haproxy安装 sls
mkdir /srv/salt/prod/haproxy/files #存放haproxy源码压缩包
haproxy自动化编译安装。
cd /srv/salt/prod/pkg
编译安装所需依赖包的自动化安装
vim pkg-init.sls
pkg-init:
pkg.installed: #pkg的installed
- names:
- gcc
- gcc-c++
- glibc
- make
- autoconf
- openssl
- openssl-devel
cd /srv/salt/prod/haproxy
vim install.sls #haproxy自动化编译安装YMAL脚本
include:
- pkg.pkg-init
haproxy-install:
file.managed:
- name: /usr/local/src/haproxy-1.7.9.tar.gz
- source: salt://haproxy/files/haproxy-1.7.9.tar.gz #salt：相当于/srv/salt/prod
- user: root
- group: root
- mode: 755
cmd.run:
- name: cd /usr/local/src && tar zxf haproxy-1.7.9.tar.gz && cd haproxy-1.7.9 && make TARGET=linux26 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy
- unless: test -d /usr/local/haproxy
- require:
- pkg: pkg-init
- file: haproxy-install
haproxy-init:
file.managed:
- name: /etc/init.d/haproxy 创建一个/etc/init.d/haproxy 文件
- source: salt://haproxy/files/haproxy.init
- user: root
- group: root
- mode: 755
- require:
- cmd: haproxy-install
cmd.run:
- name: chkconfig --add haproxy
- unless: chkconfig --list | grep haproxy #返回false才执行和-onlyif相反，有就不执行上面的命令
- require:
- file: haproxy-init
net.ipv4.ip_nonlocal_bind: #cat /proc/sys/net/ipv4/ip_nonlocal_bind 默认是0改为1，意思是可以监听非本地的ip
sysctl.present: #设定内核参数的方法
- value: 1
haproxy-config-dir:
file.directory: #文件的创建目录的方法
- name: /etc/haproxy#创建一个/etc/haproxy的目录
- user: root
- group: root
- mode: 755
手动执行 节点1上面的安装haproxy脚本
salt 'linux-node1' state.sls haproxy.install env=prod #env指定使用prod目录下的
创建集群目录
mkdir /srv/salt/prod/cluster
mkdir /srv/salt/prod/cluster/files
cd /srv/salt/prod/cluster/files
vim haproxy-outside.cfg
global
maxconn 100000
chroot /usr/local/haproxy
uid 99
gid 99
daemon
nbproc 1
pidfile /usr/local/haproxy/logs/haproxy.pid
log 127.0.0.1 local3 info
defaults
option http-keep-alive
maxconn 100000
mode http
timeout connect 5000ms
timeout client50000ms
timeout server50000ms
listen stats
mode http
bind 0.0.0.0:8888
stats enable
stats uri /haproxy-status
stats auth haproxy:saltstack
frontend frontend_www_example_com
bind 10.0.0.11:80
mode http
optionhttplog
log global
default_backend backend_www_example_com
backend backend_www_example_com
option forwardfor header X-REAL-IP
option httpchk HEAD / HTTP/1.0
balance source
server web-node1 10.0.0.7:8080 check inter 2000 rise 30 fall 15
server web-node2 10.0.0.8:8080 check inter 2000 rise 30 fall 15
cd ..
vim haproxy-outside.sls
include:
- haproxy.install
haproxy-service:
file.managed:
- name: /etc/haproxy/haproxy.cfg
- source: salt://cluster/files/haproxy-outside.cfg
- user: root
- group: root
- mode: 644
service.running:
- name: haproxy
- enable: True
-> - require:
- cmd: haproxy-init
- watch:
- file: haproxy-service
编辑top.sls
cd /srv/salt/base/
vim top.sls
base:
'*':
- init.env_init
prod:
'linux-node1':
- cluster.haproxy-outside
'linux-node2':
- cluster.haproxy-outside
在节点1和节点2上分别修改httpd 的监听端口
vim /etc/httpd/conf/httpd.conf 将80端口改为8080
Listen 8080
然后重启 /etc/init.d/httpd restart
vim /var/www/html/index.html
linux-node1#节点2上linux-node2
在浏览器中输入 10.0.0.7:8888/haproxy-status健康检查
账号密码 haproxy/saltstack
# cd /srv/salt/prod/
# tree
.
|-- cluster
| |-- files
| | `-- haproxy-outside.cfg
| `-- haproxy-outside.sls
|-- haproxy
| |-- files
| | |-- haproxy-1.7.9.tar.gz
| | `-- haproxy.init
| `-- install.sls
`-- pkg
`-- pkg-init.sls
5.2安装keepalived
wget http://www.keepalived.org/software/keepalived-1.2.19.tar.gz && tar zxf keepalived-1.2.19.tar.gz && cd keepalived-1.2.19 && ./configure --prefix=/usr/local/keepalived --disable-fwmark && make && make install
/usr/local/src/keepalived-1.2.19/keepalived/etc/init.d/keepalived.init #启动脚本
/usr/local/src/keepalived-1.2.19/keepalived/etc/keepalived/keepalived.conf #模板文件
# mkdir /srv/salt/prod/keepalived
# mkdir /srv/salt/prod/keepalived/files
# cp init.d/keepalived.init /srv/salt/prod/keepalived/files/
# cp keepalived/keepalived.conf /srv/salt/prod/keepalived/files/
# cd /usr/local/keepalived/etc/sysconfig/
# cp keepalived /srv/salt/prod/keepalived/files/keepalived.sysconfig
# cd /srv//salt/prod/keepalived/files/
# vim keepalived.init
daemon /usr/local/keepalived/sbin/keepalived ${KEEPALIVED_OPTIONS} 修改启动时的加载文件路径
cp /usr/local/src/keepalived-1.2.19.tar.gz .
# cd ..
# vim install.sls
include:
- pkg.pkg-init
keepalived-install:
file.managed:
- name: /usr/local/src/keepalived-1.2.19.tar.gz
- source: salt://keepalived/files/keepalived-1.2.19.tar.gz
- user: root
- group: root
- mode: 755
cmd.run:
- name: wget http://www.keepalived.org/software/keepalived-1.2.19.tar.gz && tar zxf keepalived-1.2.19.tar.gz && cd keepalived-1.2.19 && ./configure --prefix=/usr/local/keepalived --disable-fwmark && make && make install
- unless: test -d /usr/local/keepalived
- require:
- pkg: pkg-init
- file: keepalived-install
keepalived-init:
file.managed:
- name: /etc/init.d/keepalived
- source: salt://keepalived/files/keepalived.init
- user: root
- group: root
- mode: 755
cmd.run:
- name: chkconfig --add keepalived
- unless: chkconfig --list | grep keepalived
- require:
- file: keepalived-init
/etc/sysconfig/keepalived:
file.managed:
- source: salt://keepalived/files/keepalived.sysconfig
- user: root
- group: root
- mode: 644
/etc/keepalived:
file.directory:
- user: root
- group: root
- mode: 755
# cd /srv/salt/prod/cluster/files/
# vim haproxy-outside-keepalived.conf
! Configuration File for keepalived
global_defs {
notification_email {
saltstack@example.com
}
notification_email_from keepalived@example.com
smtp_server 127.0.0.1
smtp_connect_timeout 30
router_id {{ROUTEID}}
}
vrrp_instance haproxy_ha {
state {{STATEID}}
interface eth0
virtual_router_id 36
priority {{PRIORITYID}}
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
10.0.0.11
}
# vim haproxy-outside-keepalived.sls
include:
- keepalived.install
keepalived-service:
file.managed:
- name: /etc/keepalived/keepalived.conf
- source: salt://cluster/files/haproxy-outside-keepalived.conf
- user: root
- group: root
- mode: 644
- template: jinja
{% if grains['fqdn'] == 'linux-node1' %}
- ROUTEID: haproxy_ha
- STATEID: MASTER
- PRIORITYID: 150
{% elif grains['fqdn'] == 'linux-node2' %}
- ROUTEID: haproxy_ha
- STATEID: BACKUP
- PRIORITYID: 100
{% endif %}
service.running:
- name: keepalived
- enable: True
- watch:
- file: keepalived-service
salt '*' state.sls cluster.haproxy-outside-keepalived env=prod
# cd /srv/salt/base/
# vim top.sls
base:
'*':
- init.env_init
prod:
'linux-node1':
- cluster.haproxy-outside
- cluster.haproxy-outside-keepalived
'linux-node2':
- cluster.haproxy-outside
- cluster.haproxy-outside-keepalived
验证keeplivedalived
# ip ad li
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:9d:57:e8 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.7/24 brd 10.0.0.255 scope global eth0
inet 10.0.0.11/32 scope global eth0
inet6 fe80::20c:29ff:fe9d:57e8/64 scope link
valid_lft forever preferred_lft forever
# ip ad li
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:ca:41:95 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.8/24 brd 10.0.0.255 scope global eth0
inet6 fe80::20c:29ff:feca:4195/64 scope link
valid_lft forever preferred_lft forever
# /etc/init.d/keepalived stop
Stopping keepalived:
# ip ad li
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:ca:41:95 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.8/24 brd 10.0.0.255 scope global eth0
inet 10.0.0.11/32 scope global eth0
inet6 fe80::20c:29ff:feca:4195/64 scope link
valid_lft forever preferred_lft forever
# /etc/init.d/keepalived start
Starting keepalived:
# ip ad li
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:ca:41:95 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.8/24 brd 10.0.0.255 scope global eth0
inet6 fe80::20c:29ff:feca:4195/64 scope link
valid_lft forever preferred_lft forever
# vim /srv/salt/prod/cluster/files/haproxy-outside.cfg
balance roundrobin #roundrobin表示轮询，source表示固定。
5.3安装zabbix-agent
# cd /srv/salt/base/init
# vim zabbix.agent.sls
zabbix-agent-install:
pkg.installed:
- name: zabbix-agent
file.managed:
- name: /etc/zabbix/zabbix_agentd.conf
- source: salt://init/files/zabbix_agent.conf
- template: jinja
- defaults:
Server: {{ pillar['zabbix-agent']['Zabbix_Server'] }}
- require:
- pkg: zabbix-agent-install
service.running:
- name: zabbix-agent
- enable: True
- watch:
- pkg: zabbix-agent-install
- file: zabbix-agent-install
# vim /etc/salt/master
pillar_roots:
base:
- /srv/pillar/base
# mkdir /srv/pillar/base
# /etc/init.d/salt-master restart
# cd /srv/pillar/base/
# vim top.sls
base:
'*':
- zabbix
# vim zabbix.sls
zabbix-agent:
Zabbix_Server: 10.0.0.7
# cd /srv/salt/base/init/files
# cp /etc/zabbix/zabbix_agent.conf .
# vim zabbix_agent.conf#使用模板语言的变量引用
Server={{ Server }}
# vim env_init.sls
include:
- init.dns
- init.history
- init.audit
- init.sysctl
- init.zabbix_agent
# salt '*' state.highstate
nginx+php 以及 memcache 的安装
https://github.com/a7260488/slat-test
percona-zabbix-templates#zabbix监控mysql的软件
5.4配置master-syndic
功能有点类似 zabbix-proxy
# yum install salt-master salt-syndic -y
# vim /etc/salt/master
syndic_master 10.0.0.7
# vim /etc/salt/master
# /etc/init.d/salt-master start
Starting salt-master daemon:
# /etc/init.d/salt-syndic start
Starting salt-syndic daemon:
# vim /etc/salt/mast
order_masters: True
# /etc/init.d/salt-master restart
# /etc/init.d/salt-minion stop
Stopping salt-minion daemon:
# /etc/init.d/salt-minion stop
Stopping salt-minion daemon:
# salt-key -D
# cd /etc/salt/pki/minion/
# rm -fr *
# cd/etc/salt/pki/minion
# rm -fr *
# vim /etc/salt/minion
master 10.0.0.8
# vim /etc/salt/minion
master 10.0.0.8
# /etc/init.d/salt-minion start
Starting salt-minion daemon:
# /etc/init.d/salt-minion start
Starting salt-minion daemon:
# salt-key -A
The following keys are going to be accepted:
Unaccepted Keys:
linux-node2
Proceed? y
Key for minion linux-node2 accepted.
# salt-key
Accepted Keys:
linux-node2
Denied Keys:
Unaccepted Keys:
Rejected Keys:
# salt-key
Accepted Keys:
Denied Keys:
Unaccepted Keys:
linux-node1
linux-node2
Rejected Keys:
# salt-key -A
The following keys are going to be accepted:
Unaccepted Keys:
linux-node1
linux-node2
Proceed? y
Key for minion linux-node1 accepted.
Key for minion linux-node2 accepted.
5.5saltstack自动扩容
zabbix监控--->Action---->创建一台虚拟机/Docker容器---->部署服务---->部署代码---->测试状态----->加入集群--->加入监控--->通知
基于域名下载etcd
https://github.com/coreos/etcd/releases/download/v2.2.1/etcd-v2.2.1-linux-amd64.tar.gz
rz etcd-v2.2.1-linux-amd64.tar.gz （2进制包）
# cd etcd-v2.0.5-linux-amd64
# cp etcd etcdctl/usr/local/bin/
. /etcd &
或者这样启动
nohub etcd --name auto_scale --data-dir /data/etcd/ \
--listen-peer-urls 'http://10,0,0,7:2380,http://10.0.0.7:7001' \
--listen-client-urls 'http://10.0.0.7:2379,http://10.0.0.7:4001' \
--adevertise-client-urls 'http://10.0.0.7:2379,http://10.0.0.7:4001' &
设置key的值
# curl -s http://localhost:2379/v2/keys/message -XPUT -d value="Hello world" | python -m json.tool
{
"action": "set",
"node": {
"createdIndex": 8,
"key": "/message",
"modifiedIndex": 8,
"value": "Hello world"
},
"prevNode": {
"createdIndex": 7,
"key": "/message",
"modifiedIndex": 7,
"value": "Hello world"
}
}
获取key的值
# curl -s http://localhost:2379/v2/keys/message |python -m json.tool {
"action": "get",
"node": {
"createdIndex": 8,
"key": "/message",
"modifiedIndex": 8,
"value": "Hello world"
}
}
删除key
# curl -s http://localhost:2379/v2/keys/message -XDELETE |python -m json.tool
{
"action": "delete",
"node": {
"createdIndex": 8,
"key": "/message",
"modifiedIndex": 9
},
"prevNode": {
"createdIndex": 8,
"key": "/message",
"modifiedIndex": 8,
"value": "Hello world"
}
}
删除key以后再次获取key not found
# curl -s http://localhost:2379/v2/keys/message |python -m json.tool {
"cause": "/message",
"errorCode": 100,
"index": 9,
"message": "Key not found"
}
设置key 有效时间5秒 5秒后过期"message": "Key not found"
# curl -s http://localhost:2379/v2/keys/ttl_use -XPUT -d valu=="Hello world" |"Hello world 1" -d ttl=5 |python -m json.tool
{
"action": "set",
"node": {
"createdIndex": 10,
"expiration": "2017-11-17T12:59:41.572099187Z",
"key": "/ttl_use",
"modifiedIndex": 10,
"ttl": 5,
"value": ""
}
}
# vim /etc/salt/master#行尾添加
etcd_pillar_config:
etcd.host: 10.0.0.7
etcd.port: 4001
ext_pillar:
- etcd: etcd_pillar_config root=/salt/haproxy/
# /etc/init.d/salt-master restart
# curl -s http://localhost:2379/v2/keys/salt/haproxy/backend_www_oldboyedu_com/web-node1 -XPUT -d value="10.0.0.7:8080" | python -m json.tool
{
"action": "set",
"node": {
"createdIndex": 10,
"key": "/salt/haproxy/backend_www_oldboyedu_com/web-node1", #添加一个web-node1的节点
"modifiedIndex": 10,
"value": "10.0.0.7:8080"
}
}
#pip install python-etcd
# salt '*' pillar.items
linux-node2:
----------
backend_www_oldboyedu_com:
----------
web-node1:
10.0.0.7:8080
zabbix-agent:
----------
Zabbix_Server:
10.0.0.7
linux-node1:
----------
backend_www_oldboyedu_com:
----------
web-node1:
10.0.0.7:8080
zabbix-agent:
----------
Zabbix_Server:
10.0.0.7
# vi /srv/salt/prod/cluster/files/haproxy-outside.cfg#行尾添加
{% for web,web_ip in pillar.backend_www_oldboyedu_com.iteritems() -%}
server {{ web }} {{ web_ip }} check inter 2000 rise 30 fall 15
{% endfor %}
vim /srv/salt/prod/cluster/haproxy-outside.sls
- template: jinja
重启master
执行状态 salt '*' statehighstate
页:
[1]