Saltstack Official Salt Formula
Ви не можете вибрати більше 25 тем Теми мають розпочинатися з літери або цифри, можуть містити дефіси (-) і не повинні перевищувати 35 символів.

370 lines
9.9KB

  1. # This file managed by Salt, do not edit by hand!!
  2. # Based on salt version 0.17.4 default config
  3. {% set reserved_keys = ['master', 'minion', 'cloud', 'salt_cloud_certs'] -%}
  4. {% set cfg_salt = pillar.get('salt', {}) -%}
  5. {% set cfg_minion = cfg_salt.get('minion', {}) -%}
  6. {%- macro get_config(configname, default_value) -%}
  7. {%- if configname in cfg_minion -%}
  8. {{ configname }}: {{ cfg_minion[configname] }}
  9. {%- elif configname in cfg_salt and configname not in reserved_keys -%}
  10. {{ configname }}: {{ cfg_salt[configname] }}
  11. {%- else -%}
  12. #{{ configname }}: {{ default_value }}
  13. {%- endif -%}
  14. {%- endmacro -%}
  15. {%- from 'salt/formulas.jinja' import file_roots, formulas with context -%}
  16. ##### Primary configuration settings #####
  17. ##########################################
  18. # minion includes
  19. {{ get_config('default_include', 'minion.d/*.conf') }}
  20. # master configs
  21. {%- if 'master' in cfg_minion -%}
  22. {%- if cfg_minion['master'] is not string %}
  23. master:
  24. {% for name in cfg_minion['master'] -%}
  25. - {{ name }}
  26. {% endfor -%}
  27. {%- else %}
  28. {{ get_config('master', 'salt') }}
  29. {%- endif %}
  30. {% elif 'master' in cfg_salt -%}
  31. {%- if cfg_salt['master'] is not string %}
  32. master:
  33. {% for name in cfg_salt['master'] -%}
  34. - {{ name }}
  35. {% endfor -%}
  36. {%- else %}
  37. {{ get_config('master', 'salt') }}
  38. {%- endif -%}
  39. {%- endif %}
  40. # choose a random master
  41. {{ get_config('random_master', 'False') }}
  42. # use IPv6
  43. {{ get_config('ipv6', 'False') }}
  44. # name resolution retries
  45. {{ get_config('retry_dns', '30') }}
  46. # master port
  47. {{ get_config('master_port', '4506') }}
  48. # user to run salt.
  49. {{ get_config('user', 'root') }}
  50. # PID file
  51. {{ get_config('pidfile', '/var/run/salt-minion.pid') }}
  52. # root dir
  53. {{ get_config('root_dir', '/') }}
  54. # pki dir
  55. {{ get_config('pki_dir', '/etc/salt/pki/minion') }}
  56. # minion id
  57. {% if 'id' in cfg_minion -%}
  58. id: {{ cfg_minion['id'] }}
  59. {% else -%}
  60. #id:
  61. {%- endif %}
  62. # domain name for hostnames
  63. {{ get_config('append_domain', '') }}
  64. # custom grains
  65. {{ get_config('grains', '{}') }}
  66. # cache location
  67. {{ get_config('cachedir', '/var/cache/salt/minion') }}
  68. # environment verification
  69. {{ get_config('verify_env', 'True') }}
  70. # cache executed jobs
  71. {{ get_config('cache_jobs', 'False') }}
  72. # unix socket location
  73. {{ get_config('sock_dir', '/var/run/salt/minion') }}
  74. # output formatter
  75. {{ get_config('output', 'nested') }}
  76. # output color
  77. {{ get_config('color', 'True') }}
  78. # remove nested color
  79. {{ get_config('strip_colors', 'False') }}
  80. # backup modified files
  81. {{ get_config('backup_mode', 'minion') }}
  82. # key acceptance time
  83. {{ get_config('acceptance_wait_time', '10') }}
  84. # maximum acceptance wait
  85. {{ get_config('acceptance_wait_time_max', '0') }}
  86. # retry key
  87. {{ get_config('rejected_retry', 'False') }}
  88. # time to wait for trying reauth
  89. {{ get_config('random_reauth_delay', '60') }}
  90. # auth wait timeout
  91. {{ get_config('auth_timeout', '60') }}
  92. # auth retries
  93. {{ get_config('auth_tries', '7') }}
  94. # retry auth if ping failed
  95. {{ get_config('auth_safemode', 'False') }}
  96. # master ping interval
  97. {{ get_config('ping_interval', '0') }}
  98. # salt mine functions execution interval
  99. {{ get_config('mine_interval', '60') }}
  100. # mine functions
  101. {%- if 'mine_functions' in cfg_minion %}
  102. mine_functions:
  103. {%- for func, args in cfg_minion['mine_functions'].items() %}
  104. {{ func }}: {{ args }}
  105. {%- endfor %}
  106. {%- endif %}
  107. # reconnection parameters
  108. {{ get_config('recon_default', '100') }}
  109. {{ get_config('recon_max', '5000') }}
  110. {{ get_config('recon_randomize', 'False') }}
  111. # minion scheduler interval
  112. {{ get_config('loop_interval', '60') }}
  113. # grain refresh interval
  114. {{ get_config('grains_refresh_every', '1') }}
  115. # cache grains in minion
  116. {{ get_config('grains_cache', 'False') }}
  117. # grains cache expiration interval
  118. {{ get_config('grains_cache_expiration', '300') }}
  119. # ipc method
  120. {{ get_config('ipc_mode', 'ipc') }}
  121. # ipc tcp ports
  122. {{ get_config('tcp_pub_port', '4510') }}
  123. {{ get_config('tcp_pull_port', '4511') }}
  124. # max event size in minion bus
  125. {{ get_config('max_event_size', '1048576') }}
  126. # master check alive interval
  127. {{ get_config('master_alive_interval', '30') }}
  128. # include extra config
  129. {% if 'include' in cfg_minion -%}
  130. {% if isinstance(cfg_minion['include'], list) -%}
  131. include:
  132. {% for include in cfg_minion['include'] -%}
  133. - {{ include }}
  134. {% endfor -%}
  135. {% else -%}
  136. include: cfg_minion['include']
  137. {% endif -%}
  138. {% elif 'include' in cfg_salt -%}
  139. {% if isinstance(cfg_salt['include'], list) -%}
  140. include:
  141. {% for include in cfg_salt['include'] -%}
  142. - {{ include }}
  143. {% endfor -%}
  144. {% else -%}
  145. include: cfg_salt['include']
  146. {% endif -%}
  147. {% endif -%}
  148. ##### Minion module management #####
  149. ##########################################
  150. # disable modules
  151. {{ get_config('disable_modules', '[cmd,test]') }}
  152. {{ get_config('disable_returners', '[]') }}
  153. #
  154. # minion modules search paths
  155. {{ get_config('module_dirs', '[]') }}
  156. {{ get_config('returner_dirs', '[]') }}
  157. {{ get_config('states_dirs', '[]') }}
  158. {{ get_config('render_dirs', '[]') }}
  159. {{ get_config('utils_dirs', '[]') }}
  160. # module overrides
  161. {{ get_config('providers', '{}') }}
  162. # enable cython modules
  163. {{ get_config('cython_enable', 'False') }}
  164. # max module size
  165. {{ get_config('modules_max_memory', '-1') }}
  166. ##### State Management Settings #####
  167. ###########################################
  168. # renderer selection
  169. {{ get_config('renderer', 'yaml_jinja') }}
  170. # fail on first failure
  171. {{ get_config('failhard', 'False') }}
  172. # auto reload dynamic modules
  173. {{ get_config('autoload_dynamic_modules', 'True') }}
  174. # sync dynamic modules with deletion
  175. {{ get_config('clean_dynamic_modules', 'True') }}
  176. # minion accepted environment
  177. {{ get_config('environment', 'None') }}
  178. # top state file
  179. {{ get_config('state_top', 'top.sls') }}
  180. # states to run in minion daemon
  181. {{ get_config('startup_states', "''") }}
  182. # sls states to run
  183. {{ get_config('sls_list', '[]') }}
  184. # top file to run
  185. {{ get_config('top_file', "''") }}
  186. ##### File Directory Settings #####
  187. ##########################################
  188. # file client location
  189. {%- if standalone %}
  190. file_client: local
  191. {%- else %}
  192. {{ get_config('file_client', 'remote') }}
  193. {%- endif %}
  194. # environment file roots
  195. {% if 'file_roots' in cfg_minion -%}
  196. {{ file_roots(cfg_minion['file_roots']) }}
  197. {%- elif 'file_roots' in cfg_salt -%}
  198. {{ file_roots(cfg_salt['file_roots']) }}
  199. {%- elif formulas|length -%}
  200. {{ file_roots({'base': ['/srv/salt']}) }}
  201. {%- endif %}
  202. # limit fileserver traversal
  203. {{ get_config('fileserver_limit_traversal', 'False') }}
  204. # gitfs provider
  205. {{ get_config('gitfs_provider', 'pygit2') }}
  206. # gitfs remotes
  207. {% if 'gitfs_remotes' in cfg_minion -%}
  208. gitfs_remotes:
  209. {%- for remote in cfg_minion['gitfs_remotes'] %}
  210. {%- if remote is iterable and remote is not string %}
  211. {%- for repo, children in remote.items() %}
  212. - {{ repo }}:
  213. {%- for child in children %}
  214. {%- for key, value in child.items() %}
  215. - {{ key }}: {{ value }}
  216. {%- endfor -%}
  217. {%- endfor -%}
  218. {%- endfor -%}
  219. {%- else %}
  220. - {{ remote }}
  221. {%- endif -%}
  222. {%- endfor -%}
  223. {%- endif %}
  224. # verify git ssl errors
  225. {{ get_config('gitfs_ssl_verify', 'True') }}
  226. # gitfs root dir
  227. {{ get_config('gitfs_root', 'somefolder/otherfolder') }}
  228. # file hash method
  229. {{ get_config('hash_type', 'md5') }}
  230. # pillar roots
  231. {% if 'pillar_roots' in cfg_minion -%}
  232. pillar_roots:
  233. {%- for name, roots in cfg_minion['pillar_roots']|dictsort %}
  234. {{ name }}:
  235. {%- for dir in roots %}
  236. - {{ dir }}
  237. {%- endfor -%}
  238. {%- endfor -%}
  239. {% elif 'pillar_roots' in cfg_salt -%}
  240. pillar_roots:
  241. {%- for name, roots in cfg_salt['pillar_roots']|dictsort %}
  242. {{ name }}:
  243. {%- for dir in roots %}
  244. - {{ dir }}
  245. {%- endfor -%}
  246. {%- endfor -%}
  247. {%- endif %}
  248. ###### Security settings #####
  249. ###########################################
  250. # disable authentication
  251. {{ get_config('open_mode', 'False') }}
  252. # allow access to pki dir
  253. {{ get_config('permissive_pki_access', 'False') }}
  254. # print verbose changes
  255. {{ get_config('state_verbose', 'True') }}
  256. # multi line output
  257. {{ get_config('state_output', 'full') }}
  258. # output diff
  259. {{ get_config('state_output_diff', 'False') }}
  260. # master fingerprint
  261. {{ get_config('master_finger', "''") }}
  262. ###### Thread settings #####
  263. ###########################################
  264. # enable multiprocessing
  265. {{ get_config('multiprocessing', 'True') }}
  266. ##### Logging settings #####
  267. ##########################################
  268. # log file and log lock file location
  269. {{ get_config('log_file', '/var/log/salt/minion') }}
  270. {{ get_config('key_logfile', ' /var/log/salt/key') }}
  271. # console log level
  272. {{ get_config('log_level', 'warning') }}
  273. # logfile log level
  274. {{ get_config('log_level_logfile', '') }}
  275. # datetime format for console and logfile
  276. {{ get_config('log_datefmt', "'%H:%M:%S'") }}
  277. {{ get_config('log_datefmt_logfile', "'%Y-%m-%d %H:%M:%S'") }}
  278. # log format for console and logfiles
  279. {{ get_config('log_fmt_console', "'[%(levelname)-8s] %(message)s'") }}
  280. {{ get_config('log_fmt_logfile', "'%(asctime)s,%(msecs)03.0f [%(name)-17s][%(levelname)-8s] %(message)s'") }}
  281. # log particular modules
  282. {{ get_config('log_granular_levels', '{}') }}
  283. ###### Module configuration #####
  284. ###########################################
  285. # module parameters
  286. {%- if 'module_config' in cfg_minion %}
  287. {%- for modkey, modval in cfg_minion.module_config.items() %}
  288. {{ modkey }}: {{ modval }}
  289. {%- endfor %}
  290. {%- endif %}
  291. ###### Update settings ######
  292. ###########################################
  293. # update url
  294. {{ get_config('update_url', 'False') }}
  295. # services to restart after update
  296. {{ get_config('update_restart_services', '[]') }}
  297. ###### Keepalive settings ######
  298. ############################################
  299. # use tcp keepalive
  300. {{ get_config('tcp_keepalive', 'True') }}
  301. # first keepalive from idle
  302. {{ get_config('tcp_keepalive_idle', '300') }}
  303. # keepalive number for connection lost
  304. {{ get_config('tcp_keepalive_cnt', '-1') }}
  305. # keepalive interval
  306. {{ get_config('tcp_keepalive_intvl', '-1') }}
  307. ###### Windows Software settings ######
  308. ############################################
  309. # windows repo cache
  310. {{ get_config('win_repo_cachefile', 'salt://win/repo/winrepo.p') }}