Saltstack之api
Salt-API1，htps证书
2，配置文件
3，验证。使用PAM验证
4，启动salt-api
安装salt-api
yum -y install salt-api
创建用户
useradd -s /usr/sbin/nologin -M saltapi
设置密码
passwd saltapi
创建证书
cd /etc/pki/tls/certs/
make testcert
密码lym5401061(输入两次）
cd /etc/pki/tls/private/
openssl rsa -in localhost.key -out salt_nopass.key
设置密码
升级pip
pip install --upgrade pip
安装CherrPy
pip install CherryPy==3.2.6
修改配置文件
vim /ect/salt/master
https://images2015.cnblogs.com/blog/1144139/201705/1144139-20170529133634586-1374827244.png
cd /etc/salt/master.d/
vim api.conf
rest_cherrypy:
host: 10.0.0.151
port: 8000
ssl_crt: /ect/pki/tls/certs/localhost.crt
ssl_key: /etc/pki/tls/private/salt_nopass.key
pam验证
vim eauth.conf
https://images2015.cnblogs.com/blog/1144139/201705/1144139-20170529134246774-1073104283.png
启动
systemctl start salt-api
验证api
curl -k https://10.0.0.151:8000/login -H 'Accept: application/x-yaml' -d username='saltapi' -d password='lym5401061' -d eauth='pam'
获取到一个token
获取状态
https://images2015.cnblogs.com/blog/1144139/201705/1144139-20170529140103805-148553345.png
执行模块
https://images2015.cnblogs.com/blog/1144139/201705/1144139-20170529140150586-2031577120.png
参考文档：https://github.com/yueyongyue/saltshaker
PS：pam是可插入式验证模块
PS：安装pip
wget --no-check-certificate https://github.com/pypa/pip/archive/1.5.5.tar.gz
注意：wget获取https的时候要加上：--no-check-certificate
tar zvxf 1.5.5.tar.gz #解压文件
cd pip-1.5.5/
python setup.py install
页:
[1]