ExternalMirrors
/
old-salt-formula
ミラー元 https://github.com/saltstack-formulas/salt-formula
ウォッチ 1
スター 0
フォーク 1
コード 課題 0 リリース 68 Wiki アクティビティ
Saltstack Official Salt Formula
選択できるのは25トピックまでです。 トピックは、先頭が英数字で、英数字とダッシュ('-')を使用した35文字以内のものにしてください。
1088 コミット
3 ブランチ
ツリー: 99cad77fb9
ブランチ タグ
${ item.name }
ブランチ ${ searchTerm } を作成
'99cad77fb9' から
${ noResults }
old-salt-formula/salt/minion.sls

283 行
9.4KB
Raw Blame 履歴 

  1. {%- set tplroot = tpldir.split('/')[0] %}

  2. {%- from tplroot ~ "/map.jinja" import salt_settings with context %}

  3. {%- from tplroot ~ "/libtofs.jinja" import files_switch with context %}

  4. 

  5. {% if salt_settings.pin_version and salt_settings.version and grains.os_family|lower == 'debian' %}

  6. include:

  7.   - .pin

  8. {% endif %}

  9. 

  10.     {%- if grains.os == 'MacOS' %}

  11.         {% if salt_settings.install_packages %}

  12. 

  13. download-salt-minion:

  14.             {% if salt_settings.salt_minion_pkg_source %} {# minion upgrade? #}

  15.   file.managed:

  16.     - name: '/tmp/salt.pkg'

  17.     - source: {{ salt_settings.salt_minion_pkg_source }}

  18.                     {%- if salt_settings.salt_minion_pkg_hash %}

  19.     - source_hash: {{ salt_settings.salt_minion_pkg_hash }}

  20.                     {% else %}

  21.     - skip_verify: True

  22.                     {% endif %}

  23.     {%- if grains['kernel'] != 'Windows' %}

  24.     - user: {{ salt_settings.rootuser }}

  25.     - group: {{ salt_settings.rootgroup }}

  26.     {% endif %}

  27.     - mode: '0644'

  28.     - unless:

  29.       - test -n "{{ salt_settings.version }}" && '/opt/salt/bin/salt-minion --version=.*{{ salt_settings.version }}.*'

  30.     - require_in:

  31.       - macpackage: salt-minion

  32.     - retry: {{ salt_settings.retry_options | json }}

  33.             {%- elif "workaround https://github.com/saltstack/salt/issues/49348" %}

  34.   {% if salt_settings.install_packages %}

  35.   pkg.installed:

  36.     - name: {{ salt_settings.salt_minion }}

  37.     {%- if salt_settings.version is defined %}

  38.     - version: {{ salt_settings.version }}

  39.     {%- endif %}

  40.   {% endif %}

  41.             {%- endif %}

  42. 

  43. salt-minion-macos:

  44.   file.managed:

  45.     - onlyif: {{ grains.os == 'MacOS' }}

  46.     - name: /Library/LaunchDaemons/com.saltstack.salt.minion.plist

  47.     - source: https://raw.githubusercontent.com/saltstack/salt/master/pkg/osx/scripts/com.saltstack.salt.master.plist

  48.     - source_hash: {{ salt_settings.salt_minion_macos_plist_hash }}

  49.     - retry: {{ salt_settings.retry_options | json }}

  50.     - require_in:

  51.       - service: salt-minion

  52.     - watch_in:

  53.       - service: salt-minion

  54.         {%- endif %}

  55.     {%- endif %}

  56. 

  57. salt-minion:

  58.     {% if salt_settings.install_packages %}

  59.        {%- if grains.os == 'MacOS' and salt_settings.salt_minion_pkg_source %}

  60.   macpackage.installed:

  61.     - name: '/tmp/salt.pkg'

  62.     - target: /

  63.            {# macpackage.installed is weird with version_check, detects diff but incomplete install #}

  64.     - force: True    {# workaround #}

  65.     - unless:

  66.       - test -n "{{ salt_settings.version }}" && '/opt/salt/bin/salt-minion --version=.*{{ salt_settings.version }}.*'

  67.            {% if salt_settings.minion_service_details.state != 'ignore' %}

  68.     - require_in:

  69.       - service: salt-minion

  70.            {% endif %}

  71.     - onchanges_in:

  72.       - cmd: remove-macpackage-salt

  73.         {%- elif grains.os != 'MacOS' and "workaround https://github.com/saltstack/salt/issues/49348" %}

  74.   pkg.installed:

  75.     - name: {{ salt_settings.salt_minion }}

  76.             {%- if salt_settings.version %}

  77.     - version: {{ salt_settings.version }}

  78.             {%- endif %}

  79.             {% if salt_settings.minion_service_details.state != 'ignore' %}

  80.     - require_in:

  81.       - service: salt-minion

  82.             {% endif %}

  83.         {%- endif %}

  84.     {% endif %}

  85.   file.recurse:

  86.     - name: {{ salt_settings.config_path | path_join('minion.d') }}

  87.     {%- if salt_settings.minion_config_use_TOFS %}

  88.     - template: ''

  89.     - source: {{ files_switch(['minion.d'],

  90.                               lookup='salt-minion'

  91.                  )

  92.               }}

  93.     {%- else %}

  94.     - template: jinja

  95.     - source: salt://{{ tplroot }}/files/minion.d

  96.     - context:

  97.         standalone: False

  98.     {%- endif %}

  99.     - clean: {{ salt_settings.clean_config_d_dir }}

  100.     - exclude_pat: _*

  101.     {% if salt_settings.minion_service_details.state != 'ignore' %}

  102.   service.{{ salt_settings.minion_service_details.state }}:

  103.     - enable: {{ salt_settings.minion_service_details.enabled }}

  104.     - name: {{ salt_settings.minion_service }}

  105.     {%- if grains.os_family in ['FreeBSD', 'Gentoo'] %}

  106.     - retry: {{ salt_settings.retry_options | json }}

  107.     {%- endif %}

  108.     - watch:

  109.       - file: remove-old-minion-conf-file

  110.     - order: last

  111.     {% endif %}

  112.     {%- if not salt_settings.restart_via_at %}

  113.   cmd.run:

  114.         {%- if grains['saltversioninfo'] >= [ 2016, 3 ] %}

  115.             {%- if grains['kernel'] == 'Windows' %}

  116.     - name: 'salt-call.bat --local service.restart {{ salt_settings.minion_service }}'

  117.             {%- else %}

  118.     - name: 'salt-call --local service.restart {{ salt_settings.minion_service }} --out-file /dev/null'

  119.             {%- endif %}

  120.     - bg: True

  121.         {%- else %}

  122.             {%- if grains['kernel'] == 'Windows' %}

  123.     - name: 'start powershell "Restart-Service -Name {{ salt_settings.minion_service }}"'

  124.             {%- else %}

  125.     # old style, pre 2016.3. fork and disown the process

  126.     - name: |-

  127.         exec 0>&- # close stdin

  128.         exec 1>&- # close stdout

  129.         exec 2>&- # close stderr

  130.         nohup salt-call --local service.restart {{ salt_settings.minion_service }} --out-file /dev/null &

  131.             {%- endif %}

  132.         {%- endif %}

  133.     - onchanges:

  134.         {%- if salt_settings.install_packages %}

  135.             {%- if grains.os == 'MacOS' and salt_settings.salt_minion_pkg_source %}

  136.       - macpackage: salt-minion

  137.             {%- elif grains.os == 'MacOS' %}

  138.       - pkg: download-salt-minion

  139.             {%- else %}

  140.       - pkg: salt-minion

  141.             {%- endif %}

  142.         {%- endif %}

  143.       - file: salt-minion

  144.       - file: remove-old-minion-conf-file

  145.     {%- else %}

  146. 

  147.   {% if grains.os_family not in ['MacOS', 'FreeBSD'] %}

  148.   {# MacOS and FreeBSD have the 'at' command; but there's no package to install #}

  149. at:

  150.   pkg.installed:

  151.     - require_in: restart-salt-minion

  152.   {% endif %}

  153. 

  154. restart-salt-minion:

  155.   cmd.run:

  156.     - name: echo salt-call --local service.restart {{ salt_settings.minion_service }} | at now + 1 minute

  157.     - order: last

  158.     - onchanges:

  159.         {%- if salt_settings.install_packages %}

  160.             {%- if grains.os == 'MacOS' and salt_settings.salt_minion_pkg_source %}

  161.       - macpackage: salt-minion

  162.             {%- elif grains.os == 'MacOS' %}

  163.       - pkg: download-salt-minion

  164.             {%- else %}

  165.       - pkg: salt-minion

  166.             {%- endif %}

  167.         {%- endif %}

  168.       - file: salt-minion

  169.       - file: remove-old-minion-conf-file

  170.     {%- endif %}

  171. 

  172.     {% if 'inotify' in  salt_settings.get('minion', {}).get('beacons', {}) and salt_settings.get('pyinotify', False) %}

  173. salt-minion-beacon-inotify:

  174.   pkg.installed:

  175.     - name: {{ salt_settings.pyinotify }}

  176.     - require_in:

  177.       - service: salt-minion

  178.     - watch_in:

  179.       - service: salt-minion

  180.     {% endif %}

  181. 

  182.     {% if salt_settings.minion_remove_config %}

  183. remove-default-minion-conf-file:

  184.   file.absent:

  185.     - name: {{ salt_settings.config_path }}/minion

  186.     {% endif %}

  187. 

  188. # clean up old _defaults.conf file if they have it around

  189. remove-old-minion-conf-file:

  190.   file.absent:

  191.     - name: {{ salt_settings.config_path | path_join('minion.d', '_defaults.conf') }}

  192. 

  193.     {% if grains.os == 'MacOS' %}

  194. remove-macpackage-salt:

  195.   file.absent:

  196.     - name: /tmp/salt.pkg

  197.     - force: True

  198.     {% endif %}

  199. 

  200.     {% if not salt_settings.minion_remove_config %}

  201. permissions-minion-config:

  202.   file.managed:

  203.     - name: {{ salt_settings.config_path | path_join('minion') }}

  204.     {%- if grains['kernel'] != 'Windows' %}

  205.     - user: {{ salt_settings.rootuser }}

  206.     - group:

  207.         {%- if grains['kernel'] in ['FreeBSD', 'OpenBSD', 'NetBSD'] %}

  208.         wheel

  209.         {%- else %}

  210.         {{ salt_settings.rootgroup }}

  211.         {%- endif %}

  212.     {% endif %}

  213.     {%- if grains['kernel'] != 'Windows' %}

  214.     - mode: 640

  215.     {% endif %}

  216.     - replace: False

  217.     {% endif %}

  218. 

  219. salt-minion-pki-dir:

  220.   file.directory:

  221. {% if 'pki_dir' in salt_settings.minion %}

  222.     - name: {{ salt_settings.minion.pki_dir }}

  223. {% else %}

  224.     - name: {{ salt_settings.config_path | path_join('pki', 'minion') }}

  225. {% endif %}    

  226.     {%- if grains['kernel'] != 'Windows' %}

  227.     - user: {{ salt_settings.rootuser }}

  228.     - group:

  229.         {%- if grains['kernel'] in ['FreeBSD', 'OpenBSD', 'NetBSD'] %}

  230.         wheel

  231.         {%- else %}

  232.         {{ salt_settings.rootgroup }}

  233.         {%- endif %}

  234.     {% endif %}

  235.     {%- if grains['kernel'] != 'Windows' %}

  236.     - mode: 700

  237.     {% endif %}

  238.     - makedirs: True

  239. 

  240. permissions-minion.pem:

  241.   file.managed:

  242. {% if 'pki_dir' in salt_settings.minion %}

  243.     - name: {{ salt_settings.minion.pki_dir | path_join('minion.pem') }}

  244. {% else %}

  245.     - name: {{ salt_settings.config_path | path_join('pki', 'minion', 'minion.pem') }}

  246. {% endif %}    

  247.     {%- if grains['kernel'] != 'Windows' %}

  248.     - user: {{ salt_settings.rootuser }}

  249.     - group:

  250.         {%- if grains['kernel'] in ['FreeBSD', 'OpenBSD', 'NetBSD'] %}

  251.         wheel

  252.         {%- else %}

  253.         {{ salt_settings.rootgroup }}

  254.         {%- endif %}

  255.     {% endif %}

  256.     {%- if grains['kernel'] != 'Windows' %}

  257.     - mode: 400

  258.     {% endif %}

  259.     - replace: False

  260.     - require:

  261.       - file: salt-minion-pki-dir

  262. 

  263. permissions-minion.pub:

  264.   file.managed:

  265. {% if 'pki_dir' in salt_settings.minion %}

  266.     - name: {{ salt_settings.minion.pki_dir | path_join('minion.pub') }}

  267. {% else %}

  268.     - name: {{ salt_settings.config_path | path_join('pki', 'minion', 'minion.pub') }}

  269. {% endif %}

  270.     - user: {{ salt_settings.rootuser }}

  271.     - group:

  272.         {%- if grains['kernel'] in ['FreeBSD', 'OpenBSD', 'NetBSD'] %}

  273.         wheel

  274.         {%- else %}

  275.         {{ salt_settings.rootgroup }}

  276.         {%- endif %}

  277.     {%- if grains['kernel'] != 'Windows' %}

  278.     - mode: 644

  279.     {% endif %}

  280.     - replace: False

  281.     - require:

  282.       - file: salt-minion-pki-dir