Saltstack Official Salt Formula
Você não pode selecionar mais de 25 tópicos Os tópicos devem começar com uma letra ou um número, podem incluir traços ('-') e podem ter até 35 caracteres.

pillar.example 6.7KB

11 anos atrás
11 anos atrás
11 anos atrás
11 anos atrás
11 anos atrás
11 anos atrás
11 anos atrás
11 anos atrás
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255
  1. salt:
  2. # Set this to true to clean any non-salt-formula managed files out of
  3. # /etc/salt/{master,minion}.d ... You really don't want to do this on 2015.2
  4. # and up as it'll wipe out important files that Salt relies on.
  5. clean_config_d_dir: False
  6. # Set this to False to not have the formula install packages (in the case you
  7. # install Salt via git/pip/etc.)
  8. install_packages: True
  9. # to overwrite map.jinja salt packages
  10. lookup:
  11. salt-master: 'salt-master'
  12. salt-minion: 'salt-minion'
  13. salt-syndic: 'salt-syndic'
  14. salt-cloud: 'salt-cloud'
  15. salt-ssh: 'salt-ssh'
  16. # salt master config
  17. master:
  18. fileserver_backend:
  19. - git
  20. - s3fs
  21. - roots
  22. gitfs_remotes:
  23. - git://github.com/saltstack-formulas/salt-formula.git:
  24. - base: develop
  25. s3.keyid: GKTADJGHEIQSXMKKRBJ08H
  26. s3.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
  27. s3.buckets:
  28. - bucket1
  29. - bucket2
  30. - bucket3
  31. - bucket4
  32. file_roots:
  33. base:
  34. - /srv/salt
  35. pillar_roots:
  36. base:
  37. - /srv/pillar
  38. # for salt-api with tornado rest interface
  39. rest_tornado:
  40. port: 8000
  41. ssl_crt: /etc/pki/api/certs/server.crt
  42. ssl_key: /etc/pki/api/certs/server.key
  43. debug: False
  44. disable_ssl: False
  45. # for profile configuration as https://docs.saltstack.com/en/latest/topics/tutorials/lxc.html#tutorial-lxc-profiles
  46. lxc.container_profile:
  47. debian:
  48. template: download
  49. options:
  50. dist: debian
  51. release: jessie
  52. arch: amd64
  53. backing: lvm
  54. vgname: kimsufi
  55. size: 10G
  56. lxc.network_profile:
  57. basic:
  58. eth0:
  59. link: lxcbr0
  60. type: veth
  61. flags: up
  62. ## for external auth - LDAP
  63. # filter to use for Active Directory LDAP
  64. auth.ldap.filter: {% raw %}'sAMAccountName={{username}}'{% endraw %}
  65. # filter to use for Most other LDAP servers
  66. auth.ldap.filter: {% raw %}'uid={{ username }}'{% endraw %}
  67. # optional engine configuration
  68. engines:
  69. slack:
  70. token: xoxp-XXXXX-XXXXXXX
  71. control: True
  72. valid_users:
  73. - someuser
  74. - otheruser
  75. valid_commands:
  76. - test.ping
  77. - list_jobs
  78. aliases:
  79. list_jobs:
  80. type: runner
  81. cmd: jobs.list_jobs
  82. # salt minion config:
  83. minion:
  84. # single master setup
  85. master: salt
  86. # multi master setup
  87. #master:
  88. #- salt_master_1
  89. #- salt_master_2
  90. fileserver_backend:
  91. - git
  92. - roots
  93. gitfs_remotes:
  94. - git://github.com/saltstack-formulas/salt-formula.git:
  95. - base: develop
  96. file_roots:
  97. base:
  98. - /srv/salt
  99. pillar_roots:
  100. base:
  101. - /srv/pillar
  102. module_config:
  103. test: True
  104. test.foo: foo
  105. test.bar:
  106. - baz
  107. - quo
  108. test.baz:
  109. spam: sausage
  110. cheese: bread
  111. # salt mine setup
  112. mine_interval: 60
  113. # mine_functions can be set at the top level of the pillar, and
  114. # that is preferable because it doesn't affect the conf file and
  115. # doesn't require a minion restart. However, you can configure it
  116. # here instead if you really want to.
  117. mine_functions:
  118. network.interface_ip: [eth0]
  119. # salt cloud config
  120. cloud:
  121. master: salt
  122. # For non-templated custom cloud provider/profile/map files
  123. providers:
  124. provider-filename1.conf:
  125. vmware-prod:
  126. driver: vmware
  127. user: myusernameprod
  128. password: mypassword
  129. vmware-nonprod:
  130. driver: vmware
  131. user: myusernamenonprod
  132. password: mypassword
  133. profiles:
  134. profile-filename1.conf:
  135. server-non-prod:
  136. clonefrom: rhel6xtemplatenp
  137. grains:
  138. platform:
  139. name: salt
  140. realm: lab
  141. subscription_level: standard
  142. memory: 8GB
  143. num_cpus: 4
  144. password: sUpErsecretey
  145. provider: vmware-nonprod
  146. maps:
  147. map-filename1.map:
  148. server-non-prod:
  149. - host.mycompany.com:
  150. grains:
  151. environment: dev1
  152. # You can take profile and map templates from an alternate location
  153. # if you want to write your own.
  154. template_sources:
  155. providers: salt://salt/files/cloud.providers.d
  156. profiles: salt://salt/files/cloud.profiles.d
  157. maps: salt://salt/files/cloud.maps.d
  158. # These settings are used by the default provider templates and
  159. # only need to be set for the ones you're using.
  160. aws_key: AWSKEYIJSHJAIJS6JSH
  161. aws_secret: AWSSECRETYkkDY1iQf9zRtl9+pW+Nm+aZY95
  162. gce_project: test
  163. gce_service_account_email_address: 867543072364-orl4h2tpp8jcn1tr9ipj@developer.gserviceaccount.com
  164. rsos_user: afeawofghob
  165. rsos_tenant: tenant_id_number
  166. rsos_apikey: WFJIOJEOIGHSOFHESO
  167. rsos_regions:
  168. - ORD
  169. - DFW
  170. - IAD
  171. - SYD
  172. - HKG
  173. reactor:
  174. - 'deploy':
  175. - /srv/salt/reactors/deploy.sls
  176. ssh_roster:
  177. prod1:
  178. host: host.example.com
  179. user: ubuntu
  180. sudo: True
  181. priv: /etc/salt/ssh_keys/sshkey.pem
  182. gitfs:
  183. keys:
  184. global:
  185. # key and pub end up being the extension used on the key file. values other than key and pub are possible
  186. key: |
  187. -----BEGIN RSA PRIVATE KEY-----
  188. ...........
  189. -----END RSA PRIVATE KEY-----
  190. pub: |
  191. ...........
  192. salt_cloud_certs:
  193. aws:
  194. pem: |
  195. -----BEGIN RSA PRIVATE KEY-----
  196. ...........
  197. -----END RSA PRIVATE KEY-----
  198. gce:
  199. pem: |
  200. -----BEGIN RSA PRIVATE KEY-----
  201. ...........
  202. -----END RSA PRIVATE KEY-----
  203. salt_formulas:
  204. git_opts:
  205. # The Git options can be customized differently for each
  206. # environment, if an option is missing in a given environment, the
  207. # value from "default" is used instead.
  208. default:
  209. # URL where the formulas git repositories are downloaded from
  210. # it will be suffixed with <formula-name>.git
  211. baseurl: https://github.com/saltstack-formulas
  212. # Directory where Git repositories are downloaded
  213. basedir: /srv/formulas
  214. # Update the git repository to the latest version (False by default)
  215. update: False
  216. # Options passed directly to the git.latest state
  217. options:
  218. rev: master
  219. dev:
  220. basedir: /srv/formulas/dev
  221. update: True
  222. options:
  223. rev: develop
  224. # Options of the file.directory state that creates the directory where
  225. # the git repositories of the formulas are stored
  226. basedir_opts:
  227. makedirs: True
  228. user: root
  229. group: root
  230. mode: 755
  231. # List of formulas to enable in each environment
  232. list:
  233. base:
  234. - salt-formula
  235. - postfix-formula
  236. dev:
  237. - salt-formula
  238. - postfix-formula
  239. - openssh-formula