1. 程式人生 > >Centos 7 Saltstack 集群

Centos 7 Saltstack 集群

cto GC get pub 架構 mini lan span salt-key

一. Saltstack 雙master

master1 -------------------master2

|

minion

master1

1.yum -y install salt-master

2.vim /etc/salt/master

auto_accept: True

master2

1.yum -y install salt-master

2.vim /etc/salt/master

auto_accept: True

拷貝 maser1的

/etc/salt/pki/master/master.pem

/etc/salt/pki/master/master.pub

以上兩個文件覆蓋掉

minion

1.yum -y install salt-minion

2.vim /etc/salt/minion 添加下面內容

master:

- master1

- master2

id: minion

當其中一臺master掛了 另一臺依然可以使用

二. Saltstack syndic集群架構

技術分享圖片

master 192.168.90.177

syndic1 192.168.90.178

syndic2 192.168.90.185

minion 192.168.90.186

master

# salt-key -L

Accepted Keys:

192.168.90.178

syndic1

# salt-key -L

Accepted Keys:

192.168.90.185

Denied Keys:

syndic2

#salt-key -L

Accepted Keys:

192.168.90.186

192.168.90.177 master (安裝salt-master)

192.168.90.178 syndic1 (安裝salt-mater和salt-syndic)

192.168.90.185 syndic2 (安裝salt-mater和salt-syndic )

192.168.90.186 minion (安裝salt-minion)

1.master

# cat /etc/salt/master |grep -v "#" |grep -v "^ *$"

ipv6: False

interface: 192.168.90.177

auto_accept: True

state_top: top.sls

file_roots:

base:

- /etc/salt/base

prod:

- /etc/salt/prod

pillar_roots:

base:

- /etc/salt/pillar/base

prod:

- /etc/salt/pillar/prod

order_masters: True

2.syndic1

# cat /etc/salt/master |grep -v "#" |grep -v "^ *$"

interface: 192.168.90.178

ipv6: False

auto_accept: True

file_roots:

prod:

- /etc/salt/prod

order_masters: True

syndic_master: 192.168.90.177

3.syndic2

# cat /etc/salt/master |grep -v "#" |grep -v "^ *$"

ipv6: False

auto_accept: True

file_roots:

prod:

- /etc/salt/prod

syndic_master: 192.168.90.178

4.minion

# cat /etc/salt/minion |grep -v "#" |grep -v "^ *$"

master: 192.168.90.185

id: 192.168.90.186

當在master上執行

#salt ‘192.168.90.186‘ state.highstate 時 會去執行syndic2上 配置的top.sls文件,不會執行master上和syndic1上的file_roots、pillar和grains定義的內容。

三.混合的

技術分享圖片

大致相同。

Centos 7 Saltstack 集群