SaltStack配置管理--状态间的关系
SaltStack配置管理--状态间的关系
1、include的引用
需求场景：用于含有多个SLS的状态，使用include可以进行多个状态的组合
# pwd
/srv/salt/prod
# vim lamp.sls
include:
- apache.init
- php.init
- mysql.init
# vim ../base/top.sls
prod:
'linux-node1.example.com':
- lamp
# salt -S "192.168.56.11" state.highstate
linux-node1.example.com:
----------
ID: apache-install
Function: pkg.installed
Name: httpd
Result: True
Comment: All specified packages are already installed
Started: 09:29:20.324067
Duration: 984.864 ms
Changes:
----------
ID: apache-config
Function: file.managed
Name: /etc/httpd/conf/httpd.conf
Result: True
Comment: File /etc/httpd/conf/httpd.conf is in the correct state
Started: 09:29:21.311111
Duration: 50.95 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: The service httpd is already running
Started: 09:29:21.362769
Duration: 52.404 ms
Changes:
----------
ID: php-install
Function: pkg.installed
Result: True
Comment: All specified packages are already installed
Started: 09:29:21.415555
Duration: 0.693 ms
Changes:
----------
ID: php-config
Function: file.managed
Name: /etc/php.ini
Result: True
Comment: File /etc/php.ini is in the correct state
Started: 09:29:21.416438
Duration: 15.578 ms
Changes:
----------
ID: mysql-install
Function: pkg.installed
Result: True
Comment: All specified packages are already installed
Started: 09:29:21.432162
Duration: 0.542 ms
Changes:
----------
ID: mysql-config
Function: file.managed
Name: /etc/my.cnf
Result: True
Comment: File /etc/my.cnf is in the correct state
Started: 09:29:21.432807
Duration: 38.858 ms
Changes:
----------
ID: mysql-service
Function: service.running
Name: mariadb
Result: True
Comment: The service mariadb is already running
Started: 09:29:21.471799
Duration: 38.431 ms
Changes:
Summary for linux-node1.example.com
------------
Succeeded: 8
Failed: 0
------------
Total states run: 8
Total run time: 1.182 s
2、extend的使用
需求场景：软件包安装的时候，需求假设：只在node1上按装php-mbstring包，其他的机器不安装。
# pwd
/srv/salt/prod
# vim lamp.sls
include:
- apache.init
- php.init
- mysql.init
extend:
php-install:
pkg.installed:
- name: php-mbstring
# salt -S "192.168.56.11" state.highstate
3、require和require_in的使用
require：我依赖谁
require_in：我被谁依赖
需求场景：如果安装不成功或者配置httpd不成功，不启动httpd
（1）require使用
# pwd
/srv/salt/prod/apache
# systemctl stop httpd
# vim init_require.sls
apache-install:
pkg.installed:
- name: httpd
apache-config:
file.managed:
- name: /etc/httpd/conf/httpd.conf
- source: salt://apache/files/httpd1.conf----->将此处的文件改错，模拟配置错误
- user: root
- group: root
- mode: 644
apache-service:
service.running:
- name: httpd
- enable: True
- require:---------------------------->使用require,表示依赖
- pkg: apache-install--------------->依赖的状态模块为pkg模块，id为apache-install
- file: apache-config--------------->依赖的状态模块为file模块，id为apache-config
# salt -S "192.168.56.11" state.highstate #执行模块提示会有报错，此时httpd不会正常启动
......
----------
ID: apache-config
Function: file.managed
Name: /etc/httpd/conf/httpd.conf
Result: False
Comment: Source file salt://apache/files/httpd1.conf not found
Started: 09:48:33.459243
Duration: 40.414 ms
Changes:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: False
Comment: One or more requisite failed: apache.init.apache-config
Changes:
----------
......
Summary for linux-node1.example.com
------------
Succeeded: 6
Failed: 2
------------
Total states run: 8
Total run time: 1.110 s
# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: inactive (dead) since Sat 2018-01-20 09:44:04 CST; 4min 59s ago
Docs: man:httpd(8)
man:apachectl(8)
Process: 65439 ExecStop=/bin/kill -WINCH ${MAINPID} (code=exited, status=0/SUCCESS)
Main PID: 1025 (code=exited, status=0/SUCCESS)
Status: "Total requests: 0; Current requests/sec: 0; Current traffic: 0 B/sec"
Jan 17 10:41:59 linux-node1 systemd: Starting The Apache HTTP Server...
Jan 17 10:42:02 linux-node1 systemd: Started The Apache HTTP Server.
Jan 18 03:49:02 linux-node1 systemd: Reloaded The Apache HTTP Server.
Jan 20 09:43:53 linux-node1 systemd: Stopping The Apache HTTP Server...
Jan 20 09:44:04 linux-node1 systemd: Stopped The Apache HTTP Server.
（2）require_in使用
# vim init_require_in.sls
apache-install:
pkg.installed:
- name: httpd
- require_in:------------------>被依赖
- service: apache-service---->被依赖的模块是service，id为apache-service
apache-config:
file.managed:
- name: /etc/httpd/conf/httpd.conf
- source: salt://apache/files/httpd.conf
- user: root
- group: root
- mode: 644
- require_in:
- service: apache-service
apache-service:
service.running:
- name: httpd
- enable: True
解释说明：require和require_in都能实现依赖的功能，主动和被动的关系不同
4、watch和watch_in的使用
需求场景：监控配置文件变动，重启服务或重载服务
# pwd
/srv/salt/prod/apache
# vim init_watch.sls
apache-install:
pkg.installed:
- name: httpd
apache-config:
file.managed:
- name: /etc/httpd/conf/httpd.conf
- source: salt://apache/files/httpd.conf
- user: root
- group: root
- mode: 644
apache-service:
service.running:
- name: httpd
- enable: True
- watch:---------------------->使用watch
- file: apache-config------->监控的模块为file，id为apache-config
# vim files/httpd.conf #随意修改配置文件
# salt -S "192.168.56.11" state.highstate
......
----------
ID: apache-config
Function: file.managed
Name: /etc/httpd/conf/httpd.conf
Result: True
Comment: File /etc/httpd/conf/httpd.conf updated
Started: 10:07:14.430189
Duration: 55.133 ms
Changes:
----------
diff:
---
+++
@@ -1,4 +1,5 @@
#
+#hahahaaha--------------->检测到配置文件增加的内容
#hahahaaha
# This is the main Apache HTTP server configuration file.It contains the
# configuration directives that give the server its instructions.
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: Service restarted---------------------->将服务重启
Started: 10:07:14.533852
Duration: 1219.798 ms
Changes:
----------
httpd:
True
......
#增加reload参数，让服务重载
# vim init_watch.sls
apache-install:
pkg.installed:
- name: httpd
apache-config:
file.managed:
- name: /etc/httpd/conf/httpd.conf
- source: salt://apache/files/httpd.conf
- user: root
- group: root
- mode: 644
apache-service:
service.running:
- name: httpd
- enable: True
- reload: True----------------------------------->增加参数重载
- watch:
- file: apache-config
# salt -S "192.168.56.11" state.highstate
----------
ID: apache-config
Function: file.managed
Name: /etc/httpd/conf/httpd.conf
Result: True
Comment: File /etc/httpd/conf/httpd.conf updated------>检测文件有变化
Started: 10:10:08.493557
Duration: 53.016 ms
Changes:
----------
diff:
---
+++
@@ -1,4 +1,5 @@
#
+#hahahaaha
#hahahaaha
#hahahaaha
# This is the main Apache HTTP server configuration file.It contains the
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: Service reloaded---------------->服务重载
Started: 10:10:08.596434
Duration: 158.753 ms
Changes:
----------
httpd:
True
----------
#watch_in的使用和require_in是一样的
5、unless：状态间的条件判断
需求场景：给apache的admin目录进行加密登陆查看
（1）修改配置文件，添加认证功能
# vim files/httpd.conf
<Directory "/var/www/html/admin">
AllowOverride All
Order allow,deny
Allow from all
AuthType Basic
AuthName "haha"
AuthUserFile /etc/httpd/conf/htpasswd_file
Require user admin
</Directory>
（2）修改状态文件init.sls
# vim init.sls
apache-install:
pkg.installed:
- name: httpd
apache-config:
file.managed:
- name: /etc/httpd/conf/httpd.conf
- source: salt://apache/files/httpd.conf
- user: root
- group: root
- mode: 644
apache-auth:
pkg.installed:
- name: httpd-tools
cmd.run:------>使用cmd模块的run方法
- name: htpasswd -bc /etc/httpd/conf/htpasswd_file admin admin---->生成密码文件
- unless: test -f /etc/httpd/conf/htpasswd_file---->unless判断条件，test -f判断为假则执行。即htpasswd文件如果不存在就执行生成密码
apache-service:
service.running:
- name: httpd
- enable: True
- reload: True
- watch:
- file: apache-config
# salt -S "192.168.56.11" state.highstate
......
----------
ID: apache-auth
Function: cmd.run
Name: htpasswd -bc /etc/httpd/conf/htpasswd_file admin admin
Result: True
Comment: Command "htpasswd -bc /etc/httpd/conf/htpasswd_file admin admin" run
Started: 10:34:54.930867
Duration: 48.152 ms
Changes:
----------
pid:
4166
retcode:
0
stderr:
Adding password for user admin
stdout:
----------
ID: apache-service
Function: service.running
Name: httpd
Result: True
Comment: Service reloaded
Started: 10:34:55.014468
Duration: 162.844 ms
Changes:
----------
httpd:
True
......
浏览器访问192.168.56.11/admin/index.html会出现密码验证
页:
[1]