saltstack搭建keepalived高可用集群

一、SaltStack简介

SaltStack管理工具允许管理员对多个操作系统创建一个一致的管理系统。

二、特点

 1.快；多线程并发执行

 2.底层基于python

 3.丰富的api

 4.运行模式：本地运行；master/minion；salt SSH

  5.三大功能：远程执行；配置管理；云管理

  6.支持的操作系统比较丰富

三、SaltStack安装基础环境准备
1.server1:安装saltstack

[root@server1 2018]# cd /root/saltstack/rhel7/2018
[root@server1 2018]# ls
PyYAML-3.11-1.el7.x86_64.rpm            python2-libcloud-2.0.0-2.el7.noarch.rpm
libsodium-1.0.16-1.el7.x86_64.rpm       repodata
openpgm-5.2.122-2.el7.x86_64.rpm        salt-2018.3.3-1.el7.noarch.rpm
python-cherrypy-5.6.0-2.el7.noarch.rpm  salt-api-2018.3.3-1.el7.noarch.rpm
python-crypto-2.6.1-2.el7.x86_64.rpm    salt-cloud-2018.3.3-1.el7.noarch.rpm
python-futures-3.0.3-1.el7.noarch.rpm   salt-master-2018.3.3-1.el7.noarch.rpm
python-msgpack-0.4.6-1.el7.x86_64.rpm   salt-minion-2018.3.3-1.el7.noarch.rpm
python-psutil-2.2.1-1.el7.x86_64.rpm    salt-ssh-2018.3.3-1.el7.noarch.rpm
python-tornado-4.2.1-1.el7.x86_64.rpm   salt-syndic-2018.3.3-1.el7.noarch.rpm
python-zmq-15.3.0-3.el7.x86_64.rpm      zeromq-4.1.4-7.el7.x86_64.rpm

[root@server1 2018]# yum install -y *

设置iserver1为主master：

[root@server1 ~]# cd /etc/salt/
[root@server1 salt]# ls
cloud           cloud.maps.d       master    minion.d  proxy.d
cloud.conf.d    cloud.profiles.d   master.d  pki       roster
cloud.deploy.d  cloud.providers.d  minion    proxy
[root@server1 salt]# vim minion

 16 master: 172.25.60.1

开启服务：

[root@server1 salt]# systemctl start salt-master.service  
[root@server1 salt]# systemctl start salt-minion.service 

查看端口是否开启：

[root@server1 salt]# netstat -antlp

4505端口：用来链接slave，发布订阅
4506端口：请求响应，模式为：zmq（消息队列）

server2操作与1相同，但只需要开启salt-minion.service服务即可

安装saltstack
[root@server2 2018]# cd /etc/salt/
[root@server2 salt]# vim minion
16 master: 172.25.60.1

[root@server2 salt]# systemctl start salt-minion.service 

2.Salt秘钥认证设置

[root@server1 salt]# salt-key -L
[root@server1 salt]# salt-key -A
Proceed? [n/Y] Y   
[root@server1 salt]# salt-key -L

3.编辑执行文件

[root@server1 ~]# mkdir /srv/salt 
[root@server1 ~]# cd /srv/salt/ 
[root@server1 salt]# mkdir keepalived
[root@server1 salt]# cd keepalived/
[root@server1 keepalived]# mkdir files
[root@server1 keepalived]# vim install.sls

kp-install: 
  pkg.installed: 
    - pkgs: 
      - keepalived 
  file.managed: 
    - name: /etc/keepalived/keepalived.conf 
    - source: salt://keepalived/files/keepalived.conf 
    - template: jinja 
      {% if grains['fqdn'] == 'server1' %} 
      STATE: MASTER 
      VRID: 51 
      PRIORITY: 100 
      {% elif grains['fqdn'] == 'server2' %}
      STATE: BACKUP 
      VRID: 51 
      PRIORITY: 50 
      {% endif %} 

  service.running: 
    - name: keepalived 
    - reload: True 
    - watch: 
      - file: kp-install

 

[root@server1 keepalived]# cd files/
[root@server1 files]# vim keepalived.conf

! Configuration File for keepalived

global_defs {
   notification_email {
	root@localhost
   }
   notification_email_from keepalived@localhost
   smtp_server 127.0.0.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
}

vrrp_instance VI_1 {
    state {{ STATE }}
    interface eth0
    virtual_router_id {{ VRID }}
    priority {{ PRIORITY }}
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        172.25.60.100
    }
}

 

[root@server1 salt]# cd /srv/salt/
[root@server1 salt]# vim top.sls

base:
  'server1':
    - keepalived.install        
 
  'server2':
    - keepalived.install

4.执行top.sls文件，向所有节点安装部署服务

[root@server1 salt]# salt '*' state.highstate

5.测试:

[root@server1 salt]# ip addr

vip在server1上，关闭keepalived服务再次查看：

[root@server1 salt]# systemctl stop keepalived.service 
[root@server1 salt]# ip addr

[root@server2 ~]# ip a    

当server1宕机时，vip漂移到server2上。

再次打开keepalived，vip又回到server1上：

[root@server1 salt]# systemctl start keepalived.service 
[root@server1 salt]# ip addr