Salt stack
11 likes3,608 views
The document provides an overview of SaltStack, a powerful tool for infrastructure management, which uses a push model for sending commands to minions through a pub/sub system. It discusses key concepts such as minion keys, state files in YAML, grains, and pillars, and illustrates the process of developing custom modules and states through Python. The document also emphasizes the ease of configuring and managing systems using SaltStack's functionalities.
![using grains...
{% if grains['os'] == 'RedHat' %}
httpd:
pkg:
- installed
{% elif grains['os'] == 'Debian' %}
apache2:
pkg:
- installed
{% endif %}](https://image.slidesharecdn.com/saltstack-131126081140-phpapp02/85/Salt-stack-41-320.jpg)
![create a pillar of salt...
{% if grains['os'] == 'RedHat' %}
apache: httpd
git: git
{% elif grains['os'] == 'Debian' %}
apache: apache2
git: git-core
{% endif %}](https://image.slidesharecdn.com/saltstack-131126081140-phpapp02/85/Salt-stack-46-320.jpg)
![and use it!
apache:
pkg:
- installed
- name: {{ pillar['apache'] }}](https://image.slidesharecdn.com/saltstack-131126081140-phpapp02/85/Salt-stack-47-320.jpg)
![creating a module (for the pip-tools package)
import re!
!
import salt.utils!
from salt.utils.decorators import memoize!
!
REVIEW_RE = re.compile(‘([wd_-]+)==([d.]+) is available (you have ([d.]+))’)!
!
!
@memoize!
def _detect_install():!
return salt.utils.which('pip-review')!
!
!
def __virtual__():!
return 'piputils' if _detect_install() else False!](https://image.slidesharecdn.com/saltstack-131126081140-phpapp02/85/Salt-stack-54-320.jpg)
!
)!
!
packages = command_ret.split('n')!
updates = {}!
!
for package in packages:!
match = REVIEW_RE.match(package)!
if match:!
name, old_v, new_v = match.groups()!
updates[name] = (old_v, new_v)!
!
return updates!](https://image.slidesharecdn.com/saltstack-131126081140-phpapp02/85/Salt-stack-55-320.jpg)
![creating a state (for the pip-tools package)
def keep_updated(name, min_version=None, max_version=None):!
updatable_packages = __salt__['piptools.review']()!
pkg_info = updatable_packages.get(name, None)!
!
ret = {!
'name': name,!
'result': pkg_info is not None,!
}!](https://image.slidesharecdn.com/saltstack-131126081140-phpapp02/85/Salt-stack-62-320.jpg)
![creating a state (for the pip-tools package)
!
if package_info:!
ret['comment'] = 'Update {0} from {2} to {1}'.format(!
name, *pkg_info!
)!
ret['changes'] = {!
name: {!
'old': package_info[1],!
'new': package_info[0]!
}!
}!
else:!
ret['comment'] = 'Inexistent package {0}'.format(name)!
!
if __opts__['test']:!
ret['result'] = None!
else:!
pass # Perform the update!
!
return ret!](https://image.slidesharecdn.com/saltstack-131126081140-phpapp02/85/Salt-stack-63-320.jpg)
Salt stack
- 2. Index Why it’s so cool? How to use it? Developing for salt-stack
- 4. salt-stack
- 7. master
- 8. not a polling model, PUSHING
- 9. instructions send to the minions telling them what to do
- 10. PUB/SUB system on 4505 REP system on 4506
- 12. MessagePack to serialize the messages
- 14. it uses first public authentication keys for master needs to know public keys of the minions
- 15. then, it uses AES for communication * (symmetric, faster)
- 16. how to accept minion keys? $ salt-key Unaccepted Keys: minion_1 ! $ salt-key -a minion_1
- 17. let’s go! $ salt ‘*’ test.ping ! ! ! minion_1: True
- 18. minions
- 22. modules
- 25. execute them with the cli! $ salt ‘*’ cmd.run ‘ls /’ ... $ salt ‘*’ state.highstate ...
- 26. states
- 27. manage or configure in your hosts what to
- 28. salt-stack states are just DATA * usually in YAML
- 29. they usually map to module functions
- 30. understanding states ! ! ! ! ! ! ! ! ! /etc/init/nginx.conf: file: - managed - template: jinja - user: root - require: - pkg: nginx
- 31. nginx: pkg.installed: - name: nginx file: - managed - name: /etc/init/nginx.conf - source: salt://nginx.conf - require: - pkg: nginx service: - running - enable: True - watch: - file: /etc/nginx/nginx.conf
- 32. there are a lot of directives require watch extend include
- 33. returners
- 34. save the minion output where to
- 36. renderers
- 37. language of the state configuration
- 39. grains
- 40. configuration of the machine * read-only data ** populated at the beginning
- 41. using grains... {% if grains['os'] == 'RedHat' %} httpd: pkg: - installed {% elif grains['os'] == 'Debian' %} apache2: pkg: - installed {% endif %}
- 42. list the grains $ salt ‘*’ grains.ls ... you can use them everywhere dev: ‘os:Debian’: - match: grain - python_server
- 43. pillar
- 44. think of pillar as a variable container
- 45. it’s data, just as same as the states
- 46. create a pillar of salt... {% if grains['os'] == 'RedHat' %} apache: httpd git: git {% elif grains['os'] == 'Debian' %} apache: apache2 git: git-core {% endif %}
- 47. and use it! apache: pkg: - installed - name: {{ pillar['apache'] }}
- 48. only salt-stack?
- 52. it’s like developing a normal python module! just create a file inside the _modules dir
- 53. every callable is exported* * (with some exceptions)
- 54. creating a module (for the pip-tools package) import re! ! import salt.utils! from salt.utils.decorators import memoize! ! REVIEW_RE = re.compile(‘([wd_-]+)==([d.]+) is available (you have ([d.]+))’)! ! ! @memoize! def _detect_install():! return salt.utils.which('pip-review')! ! ! def __virtual__():! return 'piputils' if _detect_install() else False!
- 55. creating a module (for the pip-tools package) ! def review(autoinstall=False):! command_ret = __salt__['cmd.run'](! 'pip-review {0}'.format('-a' if autoinstall else '')! )! ! packages = command_ret.split('n')! updates = {}! ! for package in packages:! match = REVIEW_RE.match(package)! if match:! name, old_v, new_v = match.groups()! updates[name] = (old_v, new_v)! ! return updates!
- 56. syncing the modules $ salt-call saltutil.sync_modules ... and use it! $ salt-call piptools.review machine: ---------- Jinja2: - 2.7.1 - 2.6
- 59. it’s (also) like developing a normal python module! just create a file inside the _states dir
- 60. every callable is exported* * (with some exceptions)
- 61. the renderer structure maps directly to the state python module
- 62. creating a state (for the pip-tools package) def keep_updated(name, min_version=None, max_version=None):! updatable_packages = __salt__['piptools.review']()! pkg_info = updatable_packages.get(name, None)! ! ret = {! 'name': name,! 'result': pkg_info is not None,! }!
- 63. creating a state (for the pip-tools package) ! if package_info:! ret['comment'] = 'Update {0} from {2} to {1}'.format(! name, *pkg_info! )! ret['changes'] = {! name: {! 'old': package_info[1],! 'new': package_info[0]! }! }! else:! ret['comment'] = 'Inexistent package {0}'.format(name)! ! if __opts__['test']:! ret['result'] = None! else:! pass # Perform the update! ! return ret!
- 64. mapping the file ! Jinja2: pip_package: - keep_updated - min_version: 1.0 # # # # maps maps maps maps to to to to "name" argument pip_package state keep_updated funct min_version arg
- 66. questions?
- 67. thank you!