Grains
grains 负责采集客户端（minion端）一些基本信息 ，这个也完全可以自定义，可以在客户端自定义，然后自动汇报上来，也可以从服务器端定义然后推下去，采集完后再汇报上来（重启才收集），也可以使用saltutil.sync_grains进行刷新
1.grains之收集信息
[[email protected] salt]# salt ‘node1*‘ grains.ls
[[email protected] salt]# salt ‘node1‘ grains.items查看收集的所有信息
[[email protected] salt]# salt ‘node1‘ grains.get fqdn显示单个
node1:
node1
[[email protected] salt]# salt ‘node1‘ grains.item fqdn显示单个
node1:
----------
fqdn:
node1
[[email protected] salt]# salt ‘node1*‘ grains.get ip_interfaces:eth2
node1:
- 192.168.10.129
- fe80::20c:29ff:feca:35bf
2.grains之在指定服务器执行命令（-G匹配grains信息）
[[email protected] salt]# salt ‘node*‘ grains.get os
node2:
CentOS
node1:
CentOS
[[email protected] salt]# salt -G os:CentOS cmd.run ‘w‘ #与grains里存储的os信息匹配，匹配到的机器执行 w
node2:
14:46:45 up 15:04, 2 users, load average: 0.00, 0.00, 0.00
USER TTY FROM [email protected] IDLE JCPU PCPU WHAT
root tty1 - 12:27 2:19m 0.06s 0.06s -bash
root pts/0 192.168.10.1 12:38 28:32 0.40s 0.29s bash
node1:
06:48:31 up 15:04, 2 users, load average: 0.08, 0.04, 0.04
USER TTY FROM [email protected] IDLE JCPU PCPU WHAT
root tty1 - Wed15 2:19m 0.33s 0.01s bash
root pts/0 192.168.10.1 04:40 1.00s 1.06s 0.39s /usr/bin/python
3.自定义信息
minion端自定义1：
[[email protected] ~]# vim /etc/salt/minion ###在node2自定义角色-webserver，memcache
grains:
roles:
- webserver
- memcache
[[email protected] ~]# /etc/init.d/salt-minion restart
测试：
[[email protected] salt]# salt -G ‘roles:memcache‘ cmd.run ‘echo hehe‘
node2:
hehe
注：在master端收集与grains里自定义的角色匹配的机器执行echo命令
minion端自定义2:
[[email protected] ~]# cat /etc/salt/grains ###也可以在/etc/salt/grains自定义
web: nginx
[[email protected] ~]# /etc/init.d/salt-minion restart
测试
[[email protected] salt]# salt -G web:nginx cmd.run ‘w‘
node2:
14:59:37 up 15:17, 2 users, load average: 0.00, 0.00, 0.00
USER TTY FROM [email protected] IDLE JCPU PCPU WHAT
root tty1 - 12:27 2:32m 0.06s 0.06s -bash
root pts/0 192.168.10.1 12:38 7.00s 0.47s 0.36s bash
将minion端自定义的grains信息与top.sls联系：
[[email protected] salt]# cat /srv/salt/apache.sls
apache-install:
pkg.installed:
- names:
- httpd
- httpd-devel
apache-service:
service.running:
- name: httpd
- enable: True
- reload: True
[[email protected] salt]# cat /srv/salt/top.sls
base:
‘web:nginx‘ :
- match: grain
- apache
[[email protected] salt]# salt ‘*‘ state.highstate
注：匹配web:nginx,使用grains匹配，匹配成功的执行apache.sls这个状态
Pillar
数据存储在master端，在master端定义，指定给对应的minion，可以使用saltutil.refresh_pillar刷新，常用于存储master指定的数据，只有指定的minion可以看到。用于敏感数据保存
1.系统默认pillar
[[email protected] ~]# vim /etc/salt/master
pillar_opts: Ture #这里只是查看一下，查看之后将其关闭
[[email protected] ~]# /etc/init.d/salt-master restart
[[email protected] ~]# salt ‘*‘ pillar.items #查看系统默认的pillar,key value的形式
[[email protected] ~]# salt ‘*‘ pillar.items
node1:
----------
master:
----------
__role:
master
auth_mode:
1
auto_accept:
False
cache_sreqs:
True
cachedir:
/var/cache/salt/master
cli_summary:
False
.......................................
2.自定义pillar
#编辑配置文件
[[email protected] ~]# vim /etc/salt/master
pillar_roots:
base:
- /srv/pillar
[[email protected] ~]# mkdir /srv/pillar
#写一个apache的状态
[[email protected] ~]# cat /srv/pillar/apache.sls
{% if grains[‘os‘] == ‘CentOS‘ %}
apache: httpd
{% elif grains[‘os‘] == ‘Debian‘ %}
apache: apache2
{% endif %}
注：使用grains收集信息，如果系统是centos，那么apache的名字就叫httpd。系统是Debian的时候，apache叫apache2
#写一个tops.sls
[[email protected] ~]# cat /srv/pillar/top.sls #将定义的apache状态指定给所有minion
base:
‘*‘:
- apache
[[email protected] ~]# salt ‘*‘ saltutil.refresh_pillar刷新一下
node2:
True
node1:
True
[[email protected] ~]# salt ‘*‘ pillar.items
node1:
----------
apache:
httpd
node2:
----------
apache:
httpd
[[email protected] ~]# salt -I ‘apache:httpd‘ test.ping
node1:
True
node2:
True