ExternalMirrors
/
old-salt-formula
mirror of https://github.com/saltstack-formulas/salt-formula
Watch 1
Star 0
Fork 1
Code Issues 0 Releases 68 Wiki Activity
Saltstack Official Salt Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1096 Commits
3 Branches
Branch: pre-commit-ci-update-config
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'pre-commit-ci-update-config'
${ noResults }
old-salt-formula/salt/minion.sls

275 lines
9.2KB
Raw Permalink Blame History 

  1. {%- set tplroot = tpldir.split('/')[0] %}

  2. {%- from tplroot ~ "/map.jinja" import salt_settings with context %}

  3. {%- from tplroot ~ "/libtofs.jinja" import files_switch with context %}

  4. 

  5. {% if salt_settings.pin_version and salt_settings.version and grains.os_family|lower == 'debian' %}

  6. include:

  7.   - .pin

  8. {% endif %}

  9. 

  10.     {%- if grains.os == 'MacOS' %}

  11.         {% if salt_settings.install_packages %}

  12. 

  13. download-salt-minion:

  14.             {% if salt_settings.salt_minion_pkg_source %} {# minion upgrade? #}

  15.   file.managed:

  16.     - name: '/tmp/salt.pkg'

  17.     - source: {{ salt_settings.salt_minion_pkg_source }}

  18.                     {%- if salt_settings.salt_minion_pkg_hash %}

  19.     - source_hash: {{ salt_settings.salt_minion_pkg_hash }}

  20.                     {% else %}

  21.     - skip_verify: True

  22.                     {% endif %}

  23.     - user: {{ salt_settings.rootuser }}

  24.     - group: {{ salt_settings.rootgroup }}

  25.     - mode: '0644'

  26.     - unless:

  27.       - test -n "{{ salt_settings.version }}" && '/opt/salt/bin/salt-minion --version=.*{{ salt_settings.version }}.*'

  28.     - require_in:

  29.       - macpackage: salt-minion

  30.     - retry: {{ salt_settings.retry_options | json }}

  31.             {%- elif "workaround https://github.com/saltstack/salt/issues/49348" %}

  32.   {% if salt_settings.install_packages %}

  33.   pkg.installed:

  34.     - name: {{ salt_settings.salt_minion }}

  35.     {%- if salt_settings.version is defined %}

  36.     - version: {{ salt_settings.version }}

  37.     {%- endif %}

  38.   {% endif %}

  39.             {%- endif %}

  40. 

  41. salt-minion-macos:

  42.   file.managed:

  43.     - onlyif: {{ grains.os == 'MacOS' }}

  44.     - name: /Library/LaunchDaemons/com.saltstack.salt.minion.plist

  45.     - source: https://raw.githubusercontent.com/saltstack/salt/master/pkg/osx/scripts/com.saltstack.salt.master.plist

  46.     - source_hash: {{ salt_settings.salt_minion_macos_plist_hash }}

  47.     - retry: {{ salt_settings.retry_options | json }}

  48.     - require_in:

  49.       - service: salt-minion

  50.     - watch_in:

  51.       - service: salt-minion

  52.         {%- endif %}

  53.     {%- endif %}

  54. 

  55. salt-minion:

  56.     {% if salt_settings.install_packages %}

  57.        {%- if grains.os == 'MacOS' and salt_settings.salt_minion_pkg_source %}

  58.   macpackage.installed:

  59.     - name: '/tmp/salt.pkg'

  60.     - target: /

  61.            {# macpackage.installed is weird with version_check, detects diff but incomplete install #}

  62.     - force: True    {# workaround #}

  63.     - unless:

  64.       - test -n "{{ salt_settings.version }}" && '/opt/salt/bin/salt-minion --version=.*{{ salt_settings.version }}.*'

  65.            {% if salt_settings.minion_service_details.state != 'ignore' %}

  66.     - require_in:

  67.       - service: salt-minion

  68.            {% endif %}

  69.     - onchanges_in:

  70.       - cmd: remove-macpackage-salt

  71.         {%- elif grains.os != 'MacOS' and "workaround https://github.com/saltstack/salt/issues/49348" %}

  72.   pkg.installed:

  73.     - name: {{ salt_settings.salt_minion }}

  74.             {%- if salt_settings.version %}

  75.     - version: {{ salt_settings.version }}

  76.             {%- endif %}

  77.             {% if salt_settings.minion_service_details.state != 'ignore' %}

  78.     - require_in:

  79.       - service: salt-minion

  80.             {% endif %}

  81.         {%- endif %}

  82.     {% endif %}

  83.   file.recurse:

  84.     - name: {{ salt_settings.config_path | path_join('minion.d') }}

  85.     {%- if salt_settings.minion_config_use_TOFS %}

  86.     - template: ''

  87.     - source: {{ files_switch(['minion.d'],

  88.                               lookup='salt-minion'

  89.                  )

  90.               }}

  91.     {%- else %}

  92.     - template: jinja

  93.     - source: salt://{{ tplroot }}/files/minion.d

  94.     - context:

  95.         standalone: False

  96.     {%- endif %}

  97.     - clean: {{ salt_settings.clean_config_d_dir }}

  98.     - exclude_pat: _*

  99.     {% if salt_settings.minion_service_details.state != 'ignore' %}

  100.   service.{{ salt_settings.minion_service_details.state }}:

  101.     - enable: {{ salt_settings.minion_service_details.enabled }}

  102.     - name: {{ salt_settings.minion_service }}

  103.     {%- if grains.os_family in ['FreeBSD', 'Gentoo'] %}

  104.     - retry: {{ salt_settings.retry_options | json }}

  105.     {%- endif %}

  106.     - watch:

  107.       - file: remove-old-minion-conf-file

  108.     - order: last

  109.     {% endif %}

  110.     {%- if not salt_settings.restart_via_at %}

  111.   cmd.run:

  112.         {%- if grains['saltversioninfo'] >= [ 2016, 3 ] %}

  113.             {%- if grains['kernel'] == 'Windows' %}

  114.     - name: 'salt-call.bat --local service.restart {{ salt_settings.minion_service }}'

  115.             {%- else %}

  116.     - name: 'salt-call --local service.restart {{ salt_settings.minion_service }} --out-file /dev/null'

  117.             {%- endif %}

  118.     - bg: True

  119.         {%- else %}

  120.             {%- if grains['kernel'] == 'Windows' %}

  121.     - name: 'start powershell "Restart-Service -Name {{ salt_settings.minion_service }}"'

  122.             {%- else %}

  123.     # old style, pre 2016.3. fork and disown the process

  124.     - name: |-

  125.         exec 0>&- # close stdin

  126.         exec 1>&- # close stdout

  127.         exec 2>&- # close stderr

  128.         nohup salt-call --local service.restart {{ salt_settings.minion_service }} --out-file /dev/null &

  129.             {%- endif %}

  130.         {%- endif %}

  131.     - onchanges:

  132.         {%- if salt_settings.install_packages %}

  133.             {%- if grains.os == 'MacOS' and salt_settings.salt_minion_pkg_source %}

  134.       - macpackage: salt-minion

  135.             {%- elif grains.os == 'MacOS' %}

  136.       - pkg: download-salt-minion

  137.             {%- else %}

  138.       - pkg: salt-minion

  139.             {%- endif %}

  140.         {%- endif %}

  141.       - file: salt-minion

  142.       - file: remove-old-minion-conf-file

  143.     {%- else %}

  144. 

  145.   {% if grains.os_family not in ['MacOS', 'FreeBSD'] %}

  146.   {# MacOS and FreeBSD have the 'at' command; but there's no package to install #}

  147. at:

  148.   pkg.installed:

  149.     - require_in: restart-salt-minion

  150.   {% endif %}

  151. 

  152. restart-salt-minion:

  153.   cmd.run:

  154.     - name: echo salt-call --local service.restart {{ salt_settings.minion_service }} | at now + 1 minute

  155.     - order: last

  156.     - onchanges:

  157.         {%- if salt_settings.install_packages %}

  158.             {%- if grains.os == 'MacOS' and salt_settings.salt_minion_pkg_source %}

  159.       - macpackage: salt-minion

  160.             {%- elif grains.os == 'MacOS' %}

  161.       - pkg: download-salt-minion

  162.             {%- else %}

  163.       - pkg: salt-minion

  164.             {%- endif %}

  165.         {%- endif %}

  166.       - file: salt-minion

  167.       - file: remove-old-minion-conf-file

  168.     {%- endif %}

  169. 

  170.     {% if 'inotify' in  salt_settings.get('minion', {}).get('beacons', {}) and salt_settings.get('pyinotify', False) %}

  171. salt-minion-beacon-inotify:

  172.   pkg.installed:

  173.     - name: {{ salt_settings.pyinotify }}

  174.     - require_in:

  175.       - service: salt-minion

  176.     - watch_in:

  177.       - service: salt-minion

  178.     {% endif %}

  179. 

  180.     {% if salt_settings.minion_remove_config %}

  181. remove-default-minion-conf-file:

  182.   file.absent:

  183.     - name: {{ salt_settings.config_path }}/minion

  184.     {% endif %}

  185. 

  186. # clean up old _defaults.conf file if they have it around

  187. remove-old-minion-conf-file:

  188.   file.absent:

  189.     - name: {{ salt_settings.config_path | path_join('minion.d', '_defaults.conf') }}

  190. 

  191.     {% if grains.os == 'MacOS' %}

  192. remove-macpackage-salt:

  193.   file.absent:

  194.     - name: /tmp/salt.pkg

  195.     - force: True

  196.     {% endif %}

  197. 

  198.     {% if not salt_settings.minion_remove_config %}

  199. permissions-minion-config:

  200.   file.managed:

  201.     - name: {{ salt_settings.config_path | path_join('minion') }}

  202.     - user: {{ salt_settings.rootuser }}

  203.     - group:

  204.         {%- if grains['kernel'] in ['FreeBSD', 'OpenBSD', 'NetBSD'] %}

  205.         wheel

  206.         {%- else %}

  207.         {{ salt_settings.rootgroup }}

  208.         {%- endif %}

  209.     {%- if grains['kernel'] != 'Windows' %}

  210.     - mode: 640

  211.     {% endif %}

  212.     - replace: False

  213.     {% endif %}

  214. 

  215. salt-minion-pki-dir:

  216.   file.directory:

  217. {% if 'pki_dir' in salt_settings.minion %}

  218.     - name: {{ salt_settings.minion.pki_dir }}

  219. {% else %}

  220.     - name: {{ salt_settings.config_path | path_join('pki', 'minion') }}

  221. {% endif %}

  222.     - user: {{ salt_settings.rootuser }}

  223.     - group:

  224.         {%- if grains['kernel'] in ['FreeBSD', 'OpenBSD', 'NetBSD'] %}

  225.         wheel

  226.         {%- else %}

  227.         {{ salt_settings.rootgroup }}

  228.         {%- endif %}

  229.     {%- if grains['kernel'] != 'Windows' %}

  230.     - mode: 700

  231.     {% endif %}

  232.     - makedirs: True

  233. 

  234. permissions-minion.pem:

  235.   file.managed:

  236. {% if 'pki_dir' in salt_settings.minion %}

  237.     - name: {{ salt_settings.minion.pki_dir | path_join('minion.pem') }}

  238. {% else %}

  239.     - name: {{ salt_settings.config_path | path_join('pki', 'minion', 'minion.pem') }}

  240. {% endif %}

  241.     - user: {{ salt_settings.rootuser }}

  242.     - group:

  243.         {%- if grains['kernel'] in ['FreeBSD', 'OpenBSD', 'NetBSD'] %}

  244.         wheel

  245.         {%- else %}

  246.         {{ salt_settings.rootgroup }}

  247.         {%- endif %}

  248.     {%- if grains['kernel'] != 'Windows' %}

  249.     - mode: 400

  250.     {% endif %}

  251.     - replace: False

  252.     - require:

  253.       - file: salt-minion-pki-dir

  254. 

  255. permissions-minion.pub:

  256.   file.managed:

  257. {% if 'pki_dir' in salt_settings.minion %}

  258.     - name: {{ salt_settings.minion.pki_dir | path_join('minion.pub') }}

  259. {% else %}

  260.     - name: {{ salt_settings.config_path | path_join('pki', 'minion', 'minion.pub') }}

  261. {% endif %}

  262.     - user: {{ salt_settings.rootuser }}

  263.     - group:

  264.         {%- if grains['kernel'] in ['FreeBSD', 'OpenBSD', 'NetBSD'] %}

  265.         wheel

  266.         {%- else %}

  267.         {{ salt_settings.rootgroup }}

  268.         {%- endif %}

  269.     {%- if grains['kernel'] != 'Windows' %}

  270.     - mode: 644

  271.     {% endif %}

  272.     - replace: False

  273.     - require:

  274.       - file: salt-minion-pki-dir