salt reactor 自动完成Minion的证书签发和根据不同的业务完成不同states配置

标签：salt reactor

cat /etc/salt/master
file_roots:
  base:
    - /srv/salt/base
  prod:
    - /srv/salt/prod
interface: 192.168.1.100
reactor:
    - ‘salt/auth‘:
        - /srv/reactor/Minion.sls
    - ‘salt/minion/Minion/start‘:
        - /srv/reactor/auto.sls

auto.sls
run_state:
    local.state.sls:
        - tgt: {{ data[‘id‘] }}
        - arg:
            - shencan
run_init:
    local.cmd.run:
        - tgt: {{ data[‘id‘] }}
        - arg:
            - echo initsok >>/tmp/cpis
Minion.sls
{% if ‘act‘ in data and data[‘act‘] == ‘pend‘ %}
minion_add:
  wheel.key.accept:
    - match: {{ data[‘id‘] }}
{% endif %}

shencan.sls  这个位置/srv/salt/base
/tmp/example:
    file.managed:
        - source: salt://example

cat minion
master: 192.168.1.100
id: Minion

客户端启动后自动签发

具体看书

http://www.51niux.com/?id=120  SaltStack系列（五）之各种组件

https://docs.saltstack.com/en/latest/topics/reactor/

本文出自 “要有梦想，万一实现了呢” 博客，请务必保留此出处http://szgb17.blog.51cto.com/340201/1957214

salt reactor 自动完成Minion的证书签发和根据不同的业务完成不同states配置

标签：salt reactor

原文地址：http://szgb17.blog.51cto.com/340201/1957214