SaltStack（四）之深入理解SaltStack远程执行

1.目标
2.执行模块
3.返回

salt    ‘*’    cmd.run    ‘uptime’
命令    目标    执行模块    执行模块参数

SlatStack远程执行–目标

执行目标：https://docs.saltstack.com/en/latest/topics/targeting/index.html#advanced-targeting-methods

• 和Minion ID相关的目标匹配方式

[root@server1 ~]# salt '*' test.ping
server1:
    True
server2:
    True
[root@server1 ~]# salt 'server1' test.ping
server1:
    True
[root@server1 ~]# salt 'server*' test.ping
server1:
    True
server2:
    True
[root@server1 ~]# salt 'server[1|2]' test.ping
server1:
    True
server2:
    True
[root@server1 ~]# salt 'server?' test.ping
server1:
    True
server2:
    True
[root@server1 ~]# salt 'server[1-2]' test.ping
server1:
    True
server2:
    True
[root@server1 ~]# salt 'server[!2]' test.ping
server1:
    True

• 和Minion无关匹配

1、Grains匹配
[root@server1 ~]# salt -G 'os:CentOS' test.ping
server1:
    True
server2:
    True


2、子网、IP地址匹配
salt -S '192.168.56.0/24' test.ping

3、Pillar匹配
#这里目标key:value，是在pillar系统中定义
salt -I 'apache:httpd' test.ping

• 混合匹配（少用）
• Node Groups匹配

[root@server1 ~]# vim /etc/salt/master
nodegroups:
  web: 'L@server1,server2'
[root@server1 ~]# systemctl restart salt-master.service
[root@server1 ~]# salt -N web test.ping
server1:
    True
server2:
    True

• 批处理执行–Batch size

SlatStack远程执行–执行模块

执行模块：https://docs.saltstack.com/en/latest/ref/modules/all/index.html#all-salt-modules

SlatStack远程执行–返回

返回模块：https://docs.saltstack.com/en/latest/ref/returners/all/salt.returners.mysql.html
Return组件可以理解为SaltStack系统对执行Minion返回后的数据进行存储或者返回给其他程序，它支持多种存储方式，如MySQL、Redis、ELK、zabbix，通过Return我们可以对SaltStack的每次操作进行记录，对以后的日志审计提供了数据来源。
Return是在Master端触发任务，然后Minion接受处理任务直接与Return存储服务器建立链接，然后把数据存储到服务器。
返回是minion直接将命令执行结果写入到MySQL，需要的依赖包：MySQL-python

（1）所有minion需要安装MySQL-python
[root@server1 ~]# salt '*' cmd.run 'yum install -y MySQL-python'
[root@server1 ~]# salt '*' pkg.install MySQL-python

（2）安装mariadb数据库
[root@server1 ~]# yum install -y mariadb-server
[root@server1 ~]# systemctl start mariadb

（3）创建salt库，创建jid、salt_returns、salt_events表，授权
[root@server1 ~]# mysql
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 2
Server version: 5.5.60-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> CREATE DATABASE  `salt`
    ->   DEFAULT CHARACTER SET utf8
    ->   DEFAULT COLLATE utf8_general_ci;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> USE `salt`;
Database changed
MariaDB [salt]> DROP TABLE IF EXISTS `jids`;
Query OK, 0 rows affected, 1 warning (0.00 sec)

MariaDB [salt]> CREATE TABLE `jids` (
    ->   `jid` varchar(255) NOT NULL,
    ->   `load` mediumtext NOT NULL,
    ->   UNIQUE KEY `jid` (`jid`)
    -> ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
Query OK, 0 rows affected (0.00 sec)

MariaDB [salt]> CREATE INDEX jid ON jids(jid) USING BTREE;
ERROR 1061 (42000): Duplicate key name 'jid'
MariaDB [salt]> DROP TABLE IF EXISTS `salt_returns`;
Query OK, 0 rows affected, 1 warning (0.00 sec)

MariaDB [salt]> CREATE TABLE `salt_returns` (
    ->   `fun` varchar(50) NOT NULL,
    ->   `jid` varchar(255) NOT NULL,
    ->   `return` mediumtext NOT NULL,
    ->   `id` varchar(255) NOT NULL,
    ->   `success` varchar(10) NOT NULL,
    ->   `full_ret` mediumtext NOT NULL,
    ->   `alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
    ->   KEY `id` (`id`),
    ->   KEY `jid` (`jid`),
    ->   KEY `fun` (`fun`)
    -> ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
Query OK, 0 rows affected (0.00 sec)

MariaDB [salt]> DROP TABLE IF EXISTS `salt_events`;
Query OK, 0 rows affected, 1 warning (0.00 sec)

MariaDB [salt]> CREATE TABLE `salt_events` (
    -> `id` BIGINT NOT NULL AUTO_INCREMENT,
    -> `tag` varchar(255) NOT NULL,
    -> `data` mediumtext NOT NULL,
    -> `alter_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
    -> `master_id` varchar(255) NOT NULL,
    -> PRIMARY KEY (`id`),
    -> KEY `tag` (`tag`)
    -> ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
Query OK, 0 rows affected (0.00 sec)

MariaDB [salt]> show tables;
+----------------+
| Tables_in_salt |
+----------------+
| jids           |
| salt_events    |
| salt_returns   |
+----------------+
3 rows in set (0.00 sec)

MariaDB [salt]> grant all on salt.* to salt@'%' identified by 'salt';
Query OK, 0 rows affected (0.00 sec)

（4）修改salt-minion,配置MySQL链接
[root@server1 ~]# vim /etc/salt/minion
mysql.host: '106.52.177.115'
mysql.user: 'salt'
mysql.pass: 'salt'
mysql.db: 'salt'
mysql.port: 3306
[root@server1 ~]# systemctl restart salt-minion
[root@server2 ~]# vim /etc/salt/minion
mysql.host: '106.52.177.115'
mysql.user: 'salt'
mysql.pass: 'salt'
mysql.db: 'salt'
mysql.port: 3306
[root@server2 ~]# systemctl restart salt-minion

MariaDB [salt]> select * from salt_returns;
+-----------+----------------------+--------+---------+---------+-------------------------------------------------------------------------------------------------------------------------------------+---------------------+
| fun       | jid                  | return | id      | success | full_ret                                                                                                                            | alter_time          |
+-----------+----------------------+--------+---------+---------+-------------------------------------------------------------------------------------------------------------------------------------+---------------------+
| test.ping | 20190819182330727614 | true   | server2 | 1       | {"fun_args": [], "jid": "20190819182330727614", "return": true, "retcode": 0, "success": true, "fun": "test.ping", "id": "server2"} | 2019-08-19 18:23:31 |
+-----------+----------------------+--------+---------+---------+-------------------------------------------------------------------------------------------------------------------------------------+---------------------+
1 row in set (0.00 sec)