saltstack-部署

安装epel源（所有主机安装）

[root@salt-server /]# wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-6.repo

• 安装salt

master安装salt

[root@salt-server /]# yum -y install salt-master

client安装

[root@salt-client- /]# yum -y install salt-minion
[root@salt-client- /]# yum -y install salt-minion

查看master支持的命令

[root@salt-server /]# salt    （tab键补全）
salt         salt-key     salt-run
salt-cp      salt-master  salt-unity

client支持的命令

[root@salt-client- /]# salt-
salt-call    salt-minion  

修改client配置文件 （这里保持默认配置）

[root@salt-client- /]# vim /etc/salt/minion
 #master: salt            #默认为salt 可改为master的IP
 #id:    #默认为主机名 可根据自身环境修改  唯一的不能冲出

修改/etc/hosts

[root@salt-client- /]# echo "192.168.119.132   salt" >> /etc/hosts
[root@salt-client- /]# echo "192.168.119.132   salt" >> /etc/hosts

启动服务（先启动master）

[root@salt-server /]# /etc/init.d/salt-master start
Starting salt-master daemon:                             [  OK  ]

[root@salt-client- /]# /etc/init.d/salt-minion start
Starting salt-minion daemon:                               [  OK  ]

[root@salt-client- /]# /etc/init.d/salt-minion start
Starting salt-minion daemon:                               [  OK  ]

命令执行

[root@salt-server /]# salt-key -L     #显示所有minion认证信息
Accepted Keys:
Denied Keys:
Unaccepted Keys:
salt-client-
salt-client-
Rejected Keys:
[root@salt-server /]# salt-key -A -y     # -A接受所有Unaccepted状态的minion认证信息 -a接受指定主机  -y 执行过程中自动yes不用手动
The following keys are going to be accepted:
Unaccepted Keys:
salt-client-
salt-client-
Key for minion salt-client- accepted.
Key for minion salt-client- accepted.
[root@salt-server /]# salt-key -L
Accepted Keys:
salt-client-
salt-client-
Denied Keys:
Unaccepted Keys:
Rejected Keys:

[root@salt-server /]# salt '*' test.ping
salt-client-:
    True
salt-client-:
    True

master目录

[root@salt-server salt]# cd pki/
[root@salt-server pki]# ls
master
[root@salt-server pki]# cd master/
[root@salt-server master]# ls
master.pem  minions           minions_denied  minions_rejected
master.pub  minions_autosign  minions_pre
[root@salt-server master]# pwd
/etc/salt/pki/master

minions   #已通过认证的key
minions_pre  #等待认证的key
minions_rejected  #拒绝的key

[root@salt-server master]# pwd
/etc/salt/pki/master
[root@salt-server master]# ls minions/
salt-client- salt-client-
使用salt-key -d 'salt-client-01' -y 把salt-client-01提出
[root@salt-server master]# ls minions_pre/
salt-client-  salt-minion-