Saltstack生产案例之Haproxy安装
cd /srv/salt/prod/mkdir haproxy
mkdir keepalived
mkdir nginx
mkdir php
mkdir memcached
mkdir pkg
https://images2015.cnblogs.com/blog/1144139/201705/1144139-20170518231113853-455122292.png
cd pkg
vim make.sls
make-pkg: pkg.installed:
- pkgs:
- gcc
- gcc-c++
- glibc
- make
- autoconf
- openssl
- openssl-devel
- pcre
- pcre-devel
先安装一遍haproxy取得配置文件等信息
cd /srv/salt/prod/haproxy/files/
把haproxy安装包拷贝到这个目录
cp /root/tools/haproxy-1.6.3.tar.gz /usr/local/src/
解压 haproxy
make TARGET=linux2628
make install TARGET=linux2628 PREFIX=/usr/local/haproxy-1.6.3
ln -s /usr/local/haproxy-1.6.3/ /usr/local/haproxy
由于不是默认安装 需要修改启动脚本
cd/srv/salt/prod/haproxy/files/haproxy-1.6.3/examples
vim haproxy.init
https://images2015.cnblogs.com/blog/1144139/201705/1144139-20170520001058197-149868856.png
拷贝
cp haproxy.init/srv/salt/prod/haproxy/files
cd /srv/salt/prod/haproxy
vim install.sls
include: - pkg.make
haproxy-install:
file.managed:
- name: /usr/local/src/haproxy-1.6.3.tar.gz
- source: salt://haproxy/files/haproxy-1.6.3.tar.gz
- mode: 755
- user: root
- group: root
cmd.run:
- name: cd /usr/local/src && tar zxf haproxy-1.6.3.tar.gz && cd haproxy-1.6.3 && make TARGET=linux2628 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy && ln -s /usr/local/haproxy-1.6.3 /usr/local/haproxy
- require:
- pkg: make-pkg
- file: haproxy-install
可以执行安装试一下了
salt '10-8-86-172' state.sls haproxy.install saltenv=prod
PS：注意路径，默认使用base可以在后面加saltenv=prod使用prod
每次执行都会执行一次这个命令，这样不合理
继续学习状态间关系
1，unless 如果unless后面返回的值为真就不执行cmd.run - unless: test -L /usr/local/haproxy
https://images2015.cnblogs.com/blog/1144139/201705/1144139-20170520004824197-1904614663.png
2，onlyif
再完善一下
include: - pkg.make
haproxy-install:
file.managed:
- name: /usr/local/src/haproxy-1.6.3.tar.gz
- source: salt://haproxy/files/haproxy-1.6.3.tar.gz
- mode: 755
- user: root
- group: root
cmd.run:
- name: cd /usr/local/src && tar zxf haproxy-1.6.3.tar.gz && cd haproxy-1.6.3 && make TARGET=linux2628 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy && ln -s /usr/local/haproxy-1.6.3 /usr/local/haproxy
- unless: test -L /usr/local/haproxy
- require:
- pkg: make-pkg
- file: haproxy-install
/etc/init.d/haproxy:
file.managed:
- source: salt://haproxy/files/haproxy.init
- mode: 755
- user: root
- group: root
- require_in:
- file: haproxy-install
net.ipv4.ip_nonlocal_bind:
sysctl.present:
- value: 1
/etc/haproxy:
file.directory:
- user: root
- group: root
- mode: 755
~
PS：net.ipv4.ip_nonlocal_bind:
sysctl.present:
- value: 1
是允许ip4监听
业务引用
把结构做一个调整新建两个目录一个cluster 一个modules
把之前建立的文件夹全部放入modules（所有的基础模块放在这里）业务放在cluster
https://images2015.cnblogs.com/blog/1144139/201705/1144139-20170520130837338-816474250.png
刚刚的install.sls路径也需要修改
https://images2015.cnblogs.com/blog/1144139/201705/1144139-20170520131917994-324697439.png
可以执行代表设置成功
salt '10-8-86-172' state.sls modules.haproxy.install saltenv=prod
业务引用
/srv/salt/prod/cluster
mkdir files
cd files/
vim haproxy-outside.cfg
option http-keep-alive
maxconn 100000
mode http
timeout connect 5000ms
timeout client50000ms
timeout server 50000ms
listen stats
mode http
bind 0.0.0.0:8888
stats enable
stats uri /haproxy-status
stats auth haproxy:saltstack
frontend frontend_www_example_com
bind 192.168.56.21:80
mode http
option httplog
log global
default_backend backend_www_example_com
backend backend_www_example_com
option forwardfor header X-REAL-IP
option httpchk HEAD / HTTP/1.0
balance source
server web-node1192.168.56.21:8080 check inter 2000 rise 30 fall 15
server web-node2192.168.56.22:8080 check inter 2000 rise 30 fall 15
cd /srv/salt/prod/cluster
vim haproxy-outside.sls
include: - modules.haproxy.install
haproxy-service:
file.managed:
- name: /etc/haproxy/haproxy.cfg
- source: salt://cluster/files/haproxy-outside.cfg
- user: root
- group: root
- mode: 644
service.running:
- name: haproxy
- enable: True
-> - require:
- cmd: haproxy-install
- watch:
- file: haproxy-service
在top里面定义
vim /srv/salt/base/top.sls
base: '*':
- init.init
prod:
'*':
- cluster.haproxy-outside
执行高级状态
salt '10-8-86-172' state.highstate
页:
[1]