saltstack SLS

時間  2019-11-17
標籤 saltstack sls 简体版
原文   原文鏈接

SLS文件定義php

SLS（表明SaLt State文件）是Salt State系統的核心。SLS描述了系統的目標狀態，由格式簡單的數據構成。這常常被稱做配置管理html

top.sls 是配置管理的入口文件，一切都是從這裏開始，在master 主機上，默認存放在/srv/salt/目錄. node

top.sls 默認從 base 標籤開始解析執行,下一級是操做的目標(被控主機)，能夠經過正則，grain模塊,或分組名,來進行匹配,再下一級是要執行的state文件，不包換擴展名。python

 

建立top.slsnginx

（一）被控主機的匹配web

#經過正則進行匹配的示例，
base:
  '*':
    - users    #爲users.sls或users目錄

#經過分組名進行匹配的示例，必需要有 - match: nodegroup
base:
  master1:
    - match: nodegroup    
    - users

#經過grain模塊匹配的示例，必需要有- match: grain
base:
  'os:CentOS':
    - match: grain
    - users

（二）編寫state文件json

 首先說一下sls的命名空間session

A)、SLS文件的擴展名 .sls 被省略。 (例如. webserver.sls 變成 webserver)
B)、子目錄能夠更好的組織,每一個子目錄都由一個點來表示.(例如 webserver/dev.sls 能夠簡稱爲 webserver.dev）
C)、若是子目錄建立一個init.sls的文件，引用的時候僅指定該目錄便可. (例如 webserver/init.sls 能夠簡稱爲 webserver）
D)、若是一個目錄下同時存在webserver.sls 和 webserver/init.sls，那麼 webserver/init.sls 將被忽略，SLS文件引用的webserver將只引用webserver.sls

 示例：app

1）初始化配置dom

[root@k8s_master salt]# cat /etc/salt/master | grep -v '^#\|^$'
cachedir: /var/cache/salt/master
auto_accept: True
file_recv: True
file_roots: base: - /srv/salt/
pillar_roots:
  base:
    - /srv/pillar
pillar_opts: True
nodegroups:
   master1: 'L@k8s_master'
   agents: 'L@k8s_node1,k8s_node2'

2）配置grains_module

建立目錄並編寫腳本

[root@k8s_master salt]#install -d /srv/salt/_grains

[root@k8s_master salt]# cat /srv/salt/_grains/test_grains.py 
#!/usr/bin/env python
#-*-coding:utf-8-*-

import os,sys,commands

def get_custom_grains():
    grains = {}
    _open_file=65535
    try:
        getulimit = commands.getstatusoutput('source /etc/profile;ulimit -n')
    except Exception,e:
        print e
    print getulimit,type(getulimit)
    if getulimit[0] == 0:
        _open_file=int(getulimit[1])
    grains['max_open_files'] = _open_file
    return grains

刷新並重載模塊

#同步grains模塊，運行
[root@k8s_master pillar]#salt '*' saltutil.sync_all

#刷新模塊（讓minion編譯模塊）
[root@k8s_master pillar]#salt '*' sys.reload_modules

驗證

[root@k8s_master pillar]# salt '*' grains.item max_open_files
k8s_node1:
    ----------
    max_open_files:
        1024
k8s_node2:
    ----------
    max_open_files:
        1024
k8s_master:
    ----------
    max_open_files:
        1024

3）配置pillar

[root@k8s_master pillar]# cat top.sls 
base:
  'master1':
    - match: nodegroup
    - master1

  'agents':
    - match: nodegroup
    - agents
    
[root@k8s_master pillar]# cat master1.sls 
nginx:
    root: /www
[root@k8s_master pillar]# cat agents.sls 
nginx:
    root: /data

驗證

[root@k8s_master pillar]# salt '*' pillar.data nginx
k8s_master:
    ----------
    nginx:
        ----------
        root:
            /www
k8s_node2:
    ----------
    nginx:
        ----------
        root:
            /data
k8s_node1:
    ----------
    nginx:
        ----------
        root:
            /data

4）配置state

[root@k8s_master salt]# cat top.sls 
base:
  '*':
    - nginx

[root@k8s_master salt]# cat nginx.sls 
nginx:　　　　　　　　　　　　　　#state名稱
  pkg:　　　　　　　　　　　　　　#管理對象類型：pkg（進行軟件安裝 yum/apt） - installed　　　　　　　　　#pkg要執行的方法： install，若是未安裝就進行安裝
  file.managed:
   - source: salt://nginx/nginx.conf　　　　　　#配置模板文件位置 - name: /etc/nginx/nginx.conf
   - user: root
   - group: root
   - mode: 644
   - template: jinja
   - backup:minion　　　　　　#備份 - require:
      - pkg: nginx
  service.running:
   - enable: True　　　　　　　　#檢查服務是否在開機啓動服務隊列中 - reload: True　　　　　　　　#表示服務支持reload操做，不加則默認執行restart操做 - watch:　　　　　　　　　　　　#檢測nginx.conf是否發生變化，若是發生變化會執行reload操做，pkg爲確保nginx安裝成功 - file: /etc/nginx/nginx.conf
     - pkg: nginx

nginx.conf配置文件

[root@k8s_master salt]# cat nginx/nginx.conf 
user nginx;
worker_processes  {{ grains['num_cpus'] }};　　#採用grains獲取本地的值，與設備cpu核數一致
{% if grains['num_cpus'] == 2 %}　　　　　　　　 
worker_cpu_affinity 01 10;　　　　　　　　　　　　#分配cpu
{% elif grains['num_cpus'] == 1 %}
worker_cpu_affinity 0001;
{% elif grains['num_cpus'] == 4 %}
worker_cpu_affinity 1000 0100 0010 0001;
{% elif grains['num_cpus'] >= 8 %}
worker_cpu_affinity 00000001 00000010 00000100 00001000 00010000 00100000 01000000 10000000;
{% else %}
worker_cpu_affinity 1000 0100 0010 0001;
{% endif %}


worker_rlimit_nofile {{ grains['max_open_files'] }};　　#文件描述符
error_log  /var/log/nginx/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  {{ grains['max_open_files'] }} ; #與文件描述符數量一致
}


http {
    include       mime.types;
    default_type  application/octet-stream;


#    log_format  main  '$remote_addr - $remote_user [$time_local] $http_host $request_method  "$uri" "$query_string"'
 #                      '$status $body_bytes_sent "$http_referer" $upstream_status $upstream_addr $request_time $upstream_response_time'
 #                     '"$http_user_agent" "$http_x_forwarded_for"';
    
     log_format log_json '{"@timestamp": "$time_iso8601","remote_addr": "$remote_addr","remote_user": "$remote_user","request_method": "$request_method","uri": "$uri","query_string": "$query_string","status": "$status","body_bytes_sent": "$body_bytes_sent","http_referrer": "$http_referer","upstream_status": "$upstream_status","upstream_addr" : "$upstream_addr","request_time": "$request_time","upstream_response_time": "$upstream_response_time","request": "$request","http_user_agent": "$http_user_agent","http_x_forwarded_for": "$http_x_forwarded_for"}';
 
#   log_format json '{"@timestamp":"$time_iso8601",'
 #                 '"host":"$server_addr",'
  #                '"clientip":"$remote_addr",'
   #               '"remote_user":"$remote_user",'
    #              '"request_method":"$request_method",'
     #             '"request":"$request",'
#		  '"uri":"$uri",'
 #                 '"query_string":"$query_string",'
  #                '"http_user_agent":"$http_user_agent",'
   #               '"size":$body_bytes_sent,'
    #              '"responsetime":$request_time,'
     #             '"upstreamtime":"$upstream_response_time",'
      #            '"upstreamhost":"$upstream_addr",'
       #           '"url":"$uri",'
        #          '"domain":"$host",'
         #         '"client_realip":"$http_x_forwarded_for",'
          #        '"referer":"$http_referer",'
           #       '"status":"$status"}';

    access_log /var/log/nginx/access.log  log_json;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       80;
        server_name  {{ grains['ip4_interfaces']['ens33'][0] }};　　#獲取本地的ip（grains）
	root {{ pillar['nginx']['root'] }};　　　　　　　　　　　　　　　#獲取web目錄（pillar裏定製）
	index index.php index.html index.htm;
        #charset koi8-r;


        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
	location /ngx_status 
    	{
        	stub_status on;
        	access_log off;
    	}

	location ~ ^/(status|ping)$
	{
		include fastcgi_params;
        	fastcgi_pass 127.0.0.1:9000;
        	fastcgi_param SCRIPT_FILENAME $fastcgi_script_name;
	}
        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}
	location ~ \.php$ {
            fastcgi_connect_timeout 300;
            fastcgi_read_timeout 300;
            fastcgi_send_timeout 300;
            fastcgi_buffer_size 128k;
            fastcgi_buffers 32 32k;
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }


    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

}

 執行刷新state配置

[root@k8s_master salt]# pwd
/srv/salt
[root@k8s_master salt]#salt '*' state.highstate

效果圖

相關文章
相關標籤/搜索
每日一句
    每一个你不满意的现在，都有一个你没有努力的曾经。
本站公眾號
   歡迎關注本站公眾號,獲取更多信息
聯繫我們 最近搜索 最新文章 沪ICP备13005482号-10 MyBatis教程 SQL 教程 MySQL教程 Java 教程 Thymeleaf 教程 Hibernate教程 Spring教程 Redis教程