Compare commits

...

1 Commits

Author SHA1 Message Date
033cc77d7a
Manage salt-minion package, service and config
Restart the service after upgrading the package or modifying the minion
configuration file.

Signed-off-by: Joe Groocock <me@frebib.net>
2020-07-12 16:19:14 +01:00
3 changed files with 63 additions and 0 deletions

View File

@ -0,0 +1,36 @@
{%- set masters = ['salt.nerdhouse.io'] %}
salt-minion:
pkg.installed:
- version: latest
service.running:
- enable: true
- require:
- pkg: salt-minion
- file: /etc/salt/minion
service.restart:
- order: last
- no_block: true
- watch:
- pkg: salt-minion
- file: /etc/salt/minion
- require:
- cmd: check-minion-config
/etc/salt/minion:
file.managed:
- source: salt://{{ slspath }}/minion.jinja
- user: root
- group: root
- mode: 644
- context:
- masters: {{ masters|json }}
- require:
- pkg: salt-minion
check-minion-config:
cmd.run:
- name: sudo salt-call --local --skip-grains test.ping:
- watch:
- file: /etc/salt/minion

View File

@ -0,0 +1,26 @@
id: {{ minion_id }}
log_level: info
ipv6: true
ssl: true
transport: tcp
# https://github.com/saltstack/salt/blob/b95213ec903402f25c1e0aeb3990fe8452ab63ce/conf/minion#L39-L47
# str, failover or disable
master_type: str
{% if masters is defined %}
master:
{%- for master in masters %}
- {{ master }}
{%- endfor %}
{%- endif %}
# set the default saltenv for highstate
# otherwise it tries to run all of them 🤔
saltenv: base
# useful for influencing git_pillar and gitfs at the same time
pillarenv_from_saltenv: true
enable_fqdns_grains: false
enable_gpu_grains: false
# vim: ft=yaml

View File

@ -2,3 +2,4 @@
'*': '*':
- users - users
- sshd - sshd
- salt.minion