SaltStack组件之return
使用mysql作为return存储方式
在所有minion上安装Mysql-python模块
[root@master ~]# salt '*' cmd.run 'rpm -qa|grep -i MYSQL |grep python'
minion:
python3-PyMySQL-0.10.1-2.module_el8.5.0+761+faacb0fb.noarch
部署一台mysql服务器用作存储服务器
[root@mysql ~]# yum -y install mariadb-server
[root@mysql ~]# systemctl start mariadb
[root@mysql ~]# systemctl enable mariadb
Created symlink /etc/systemd/system/mysql.service → /usr/lib/systemd/system/mariadb.service.
Created symlink /etc/systemd/system/mysqld.service → /usr/lib/systemd/system/mariadb.service.
Created symlink /etc/systemd/system/multi-user.target.wants/mariadb.service → /usr/lib/systemd/system/mariadb.service.
[root@mysql ~]# ss -antl
State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
LISTEN 0 128 [::]:22 [::]:*
LISTEN 0 80 *:3306 *:*
创建数据库和表结构
[root@mysql ~]# mysql
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 8
Server version: 10.3.28-MariaDB MariaDB Server
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MariaDB [(none)]> CREATE DATABASE `salt`
-> DEFAULT CHARACTER SET utf8
-> DEFAULT COLLATE utf8_general_ci;
Query OK, 1 row affected (0.001 sec)
MariaDB [(none)]> USE `salt`;
Database changed
MariaDB [salt]> DROP TABLE IF EXISTS `jids`;
Query OK, 0 rows affected, 1 warning (0.001 sec)
MariaDB [salt]> CREATE TABLE `jids` (
-> `jid` varchar(255) NOT NULL,
-> `load` mediumtext NOT NULL,
-> UNIQUE KEY `jid` (`jid`)
-> ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
Query OK, 0 rows affected (0.007 sec)
MariaDB [salt]> DROP TABLE IF EXISTS `salt_returns`;
Query OK, 0 rows affected, 1 warning (0.001 sec)
MariaDB [salt]> CREATE TABLE `salt_returns` (
-> `fun` varchar(50) NOT NULL,
-> `jid` varchar(255) NOT NULL,
-> `return` mediumtext NOT NULL,
-> `id` varchar(255) NOT NULL,
-> `success` varchar(10) NOT NULL,
-> `full_ret` mediumtext NOT NULL,
-> `alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-> KEY `id` (`id`),
-> KEY `jid` (`jid`),
-> KEY `fun` (`fun`)
-> ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
Query OK, 0 rows affected (0.005 sec)
MariaDB [salt]> DROP TABLE IF EXISTS `salt_events`;
Query OK, 0 rows affected, 1 warning (0.001 sec)
MariaDB [salt]> CREATE TABLE `salt_events` (
-> `id` BIGINT NOT NULL AUTO_INCREMENT,
-> `tag` varchar(255) NOT NULL,
-> `data` mediumtext NOT NULL,
-> `alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-> `master_id` varchar(255) NOT NULL,
-> PRIMARY KEY (`id`),
-> KEY `tag` (`tag`)
-> ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
Query OK, 0 rows affected (0.004 sec)
MariaDB [salt]> show tables;
+----------------+
| Tables_in_salt |
+----------------+
| jids |
| salt_events |
| salt_returns |
+----------------+
3 rows in set (0.001 sec)
授权访问
MariaDB [salt]> grant all on salt.* to salt@'192.168.149.%' identified by 'salt';
Query OK, 0 rows affected (0.001 sec)
MariaDB [salt]> flush privileges;
Query OK, 0 rows affected (0.001 sec)
配置minion
[root@minion ~]# vim /etc/salt/minion
.....
mysql.host: '192.168.149.137' 此处ip为mysql的ip
mysql.user: 'salt'
mysql.pass: 'salt'
mysql.db: 'salt'
mysql.port: 3306
......
[root@minion ~]# systemctl restart salt-minion
在Master上测试存储到mysql中
[root@master ~]# salt '*' test.ping --return mysql
minion:
True
在数据库中查询
MariaDB [salt]> select * from salt_returns\G
*************************** 1. row ***************************
fun: test.ping
jid: 20210708112240985083
return: true
id: minion
success: 1
full_ret: {"success": true, "return": true, "retcode": 0, "jid": "20210708112240985083", "fun": "test.ping", "fun_args": [], "id": "minion"}
alter_time: 2021-07-08 07:22:43
1 row in set (0.000 sec)
job cache
开启master端的master_job_cache
[root@master ~]# yum -y install python3-PyMySQL
[root@master ~]# vim /etc/salt/master
......此处省略......
master_job_cache: mysql
mysql.host: '192.168.149.137'
mysql.user: 'salt'
mysql.pass: 'salt'
mysql.db: 'salt'
mysql.port: 3306
......
[root@master ~]# systemctl restart salt-master
在数据库服务器中清空表内容
MariaDB [salt]> delete from salt.salt_returns;
Query OK, 1 row affected (0.002 sec)
MariaDB [salt]> select * from salt.salt_returns;
Empty set (0.000 sec)
在master上再次测试能否存储至数据库
[root@master ~]# salt 'minion' cmd.run 'df -h'
minion:
Filesystem Size Used Avail Use% Mounted on
devtmpfs 876M 0 876M 0% /dev
tmpfs 895M 80K 895M 1% /dev/shm
tmpfs 895M 8.8M 887M 1% /run
tmpfs 895M 0 895M 0% /sys/fs/cgroup
/dev/mapper/cs-root 17G 2.1G 15G 13% /
/dev/nvme0n1p1 1014M 197M 818M 20% /boot
tmpfs 179M 0 179M 0% /run/user/0
在数据库中查询
MariaDB [salt]> select * from salt.salt_returns\G
*************************** 1. row ***************************
fun: cmd.run
jid: 20210708122008769697
return: "Filesystem Size Used Avail Use% Mounted on\ndevtmpfs 876M 0 876M 0% /dev\ntmpfs 895M 40K 895M 1% /dev/shm\ntmpfs 895M 8.8M 887M 1% /run\ntmpfs 895M 0 895M 0% /sys/fs/cgroup\n/dev/mapper/cs-root 17G 2.1G 15G 13% /\n/dev/nvme0n1p1 1014M 197M 818M 20% /boot\ntmpfs 179M 0 179M 0% /run/user/0"
id: minion
success: 1
full_ret: {"cmd": "_return", "id": "minion", "success": true, "return": "Filesystem Size Used Avail Use% Mounted on\ndevtmpfs 876M 0 876M 0% /dev\ntmpfs 895M 40K 895M 1% /dev/shm\ntmpfs 895M 8.8M 887M 1% /run\ntmpfs 895M 0 895M 0% /sys/fs/cgroup\n/dev/mapper/cs-root 17G 2.1G 15G 13% /\n/dev/nvme0n1p1 1014M 197M 818M 20% /boot\ntmpfs 179M 0 179M 0% /run/user/0", "retcode": 0, "jid": "20210708122008769697", "fun": "cmd.run", "fun_args": ["df -h"], "_stamp": "2021-07-08T12:20:08.898521"}
alter_time: 2021-07-08 08:20:08
1 row in set (0.000 sec)
job管理
获取任务的jid
[root@master ~]# salt 'minion' cmd.run 'uptime' -v
Executing job with jid 20210708122033489726
-------------------------------------------
minion:
08:20:33 up 1:17, 2 users, load average: 0.00, 0.08, 0.16
通过jid获取此任务的返回结果
[root@master ~]# salt-run jobs.lookup_jid 20210708122033489726
minion:
08:20:33 up 1:17, 2 users, load average: 0.00, 0.08, 0.16
SaltStack之salt-ssh
salt-ssh管理
在 master 上安装 salt-ssh
[root@master ~]# yum -y install salt-ssh
目标机器上安装python3
[root@mysql ~]# yum -y install python3
通过使用用户名密码的SSH实现远程管理
修改配置文件，添加受控机信息
[root@master ~]# vim /etc/salt/roster
......
mariadb_host:
host: 192.168.149.137
user: root
passwd: 1
测试连通性
- 第一次访问时需要输入 yes/no ，但是 saltstack 是不支持交互式操作的，所以为了解决这个问题，我们需要对其进行设置，让系统不进行主机验证。
[root@master ~]# vim ~/.ssh/config
StrictHostKeyChecking no
[root@master ~]# salt-ssh '*' test.ping
mariadb_host:
True
执行状态命令，初始化系统，安装salt-minion
[root@master ~]# mkdir -p /srv/salt/base/{repo,files}
[root@master ~]# \cp /etc/yum.repos.d/salt.repo /srv/salt/base/repo/salt.repo
[root@master ~]# cp /etc/salt/minion /srv/salt/base/files/
[root@master ~]# vim /srv/salt/base/repo.sls
salt-repo:
file.managed:
- name: /etc/yum.repos.d/salt.repo
- source: salt://repo/salt.repo
- user: root
- group: root
- mode: 644
[root@master ~]# vim /srv/salt/base/minion.sls
salt-minion-install:
pkg.installed:
- name: salt-minion
salt-minion-conf:
file.managed:
- name: /etc/salt/minion
- source: salt://files/minion
- user: root
- group: root
- mode: 644
- template: jinja
- default:
ID: {{ grains['ipv4'] [1] }}
- require:
- pkg: salt-minion-install
salt-minion-service:
service.running:
- name: salt-minion
- enable: True
- start: True
- watch:
- file: /etc/salt/minion
[root@master ~]# salt-ssh '*' state.sls repo
mariadb_host:
----------
ID: salt-repo
Function: file.managed
Name: /etc/yum.repos.d/sal.repo
Result: True
Comment: File /etc/yum.repos.d/sal.repo updated
Started: 09:19:06.836369
Duration: 94.254 ms
Changes:
----------
diff:
New file
mode:
0644
Summary for mariadb_host
------------
Succeeded: 1 (changed=1)
Failed: 0
------------
Total states run: 1
Total run time: 94.254 ms
[root@master ~]# salt-ssh '*' state.sls minion
mariadb_host:
----------
ID: salt-minion-install
Function: pkg.installed
Name: salt-minion
Result: True
Comment: The following packages were installed/updated: salt-minion
Started: 09:22:07.706076
Duration: 135202.071 ms
Changes:
----------
此处省略......
[root@master ~]# salt-ssh '*' cmd.run 'systemctl restart salt-minion'
mariadb_host:
[root@master ~]# salt-key -L
Accepted Keys:
master
minion
minion1
Denied Keys:
Unaccepted Keys:
mysql 可以看到这里多了一个还未被添加的minion
Rejected Keys:
[root@master ~]# salt-key -a mysql
The following keys are going to be accepted:
Unaccepted Keys:
mysql
Proceed? [n/Y] y
Key for minion mysql accepted.
[root@master ~]# salt-key -L
Accepted Keys:
master
minion
minion1
mysql
Denied Keys:
Unaccepted Keys:
Rejected Keys
[root@mysql ~]# systemctl status salt-minion
● salt-minion.service - The Salt Minion
Loaded: loaded (/usr/lib/systemd/system/salt-minion.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2021-07-08 09:27:31 EDT; 29s ago
Docs: man:salt-minion(1)
file:///usr/share/doc/salt/html/contents.html
https://docs.saltstack.com/en/latest/contents.html
Main PID: 268860 (salt-minion)