Saltstack Official Salt Formula
Ви не можете вибрати більше 25 тем Теми мають розпочинатися з літери або цифри, можуть містити дефіси (-) і не повинні перевищувати 35 символів.

256 lines
6.7KB

  1. salt:
  2. # Set this to true to clean any non-salt-formula managed files out of
  3. # /etc/salt/{master,minion}.d ... You really don't want to do this on 2015.2
  4. # and up as it'll wipe out important files that Salt relies on.
  5. clean_config_d_dir: False
  6. # Set this to False to not have the formula install packages (in the case you
  7. # install Salt via git/pip/etc.)
  8. install_packages: True
  9. # to overwrite map.jinja salt packages
  10. lookup:
  11. salt-master: 'salt-master'
  12. salt-minion: 'salt-minion'
  13. salt-syndic: 'salt-syndic'
  14. salt-cloud: 'salt-cloud'
  15. salt-ssh: 'salt-ssh'
  16. # salt master config
  17. master:
  18. fileserver_backend:
  19. - git
  20. - s3fs
  21. - roots
  22. gitfs_remotes:
  23. - git://github.com/saltstack-formulas/salt-formula.git:
  24. - base: develop
  25. s3.keyid: GKTADJGHEIQSXMKKRBJ08H
  26. s3.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
  27. s3.buckets:
  28. - bucket1
  29. - bucket2
  30. - bucket3
  31. - bucket4
  32. file_roots:
  33. base:
  34. - /srv/salt
  35. pillar_roots:
  36. base:
  37. - /srv/pillar
  38. # for salt-api with tornado rest interface
  39. rest_tornado:
  40. port: 8000
  41. ssl_crt: /etc/pki/api/certs/server.crt
  42. ssl_key: /etc/pki/api/certs/server.key
  43. debug: False
  44. disable_ssl: False
  45. # for profile configuration as https://docs.saltstack.com/en/latest/topics/tutorials/lxc.html#tutorial-lxc-profiles
  46. lxc.container_profile:
  47. debian:
  48. template: download
  49. options:
  50. dist: debian
  51. release: jessie
  52. arch: amd64
  53. backing: lvm
  54. vgname: kimsufi
  55. size: 10G
  56. lxc.network_profile:
  57. basic:
  58. eth0:
  59. link: lxcbr0
  60. type: veth
  61. flags: up
  62. ## for external auth - LDAP
  63. # filter to use for Active Directory LDAP
  64. auth.ldap.filter: {% raw %}'sAMAccountName={{username}}'{% endraw %}
  65. # filter to use for Most other LDAP servers
  66. auth.ldap.filter: {% raw %}'uid={{ username }}'{% endraw %}
  67. # optional engine configuration
  68. engines:
  69. slack:
  70. token: xoxp-XXXXX-XXXXXXX
  71. control: True
  72. valid_users:
  73. - someuser
  74. - otheruser
  75. valid_commands:
  76. - test.ping
  77. - list_jobs
  78. aliases:
  79. list_jobs:
  80. type: runner
  81. cmd: jobs.list_jobs
  82. # salt minion config:
  83. minion:
  84. # single master setup
  85. master: salt
  86. # multi master setup
  87. #master:
  88. #- salt_master_1
  89. #- salt_master_2
  90. fileserver_backend:
  91. - git
  92. - roots
  93. gitfs_remotes:
  94. - git://github.com/saltstack-formulas/salt-formula.git:
  95. - base: develop
  96. file_roots:
  97. base:
  98. - /srv/salt
  99. pillar_roots:
  100. base:
  101. - /srv/pillar
  102. module_config:
  103. test: True
  104. test.foo: foo
  105. test.bar:
  106. - baz
  107. - quo
  108. test.baz:
  109. spam: sausage
  110. cheese: bread
  111. # salt mine setup
  112. mine_interval: 60
  113. # mine_functions can be set at the top level of the pillar, and
  114. # that is preferable because it doesn't affect the conf file and
  115. # doesn't require a minion restart. However, you can configure it
  116. # here instead if you really want to.
  117. mine_functions:
  118. network.interface_ip: [eth0]
  119. # salt cloud config
  120. cloud:
  121. master: salt
  122. # For non-templated custom cloud provider/profile/map files
  123. providers:
  124. provider-filename1.conf:
  125. vmware-prod:
  126. driver: vmware
  127. user: myusernameprod
  128. password: mypassword
  129. vmware-nonprod:
  130. driver: vmware
  131. user: myusernamenonprod
  132. password: mypassword
  133. profiles:
  134. profile-filename1.conf:
  135. server-non-prod:
  136. clonefrom: rhel6xtemplatenp
  137. grains:
  138. platform:
  139. name: salt
  140. realm: lab
  141. subscription_level: standard
  142. memory: 8GB
  143. num_cpus: 4
  144. password: sUpErsecretey
  145. provider: vmware-nonprod
  146. maps:
  147. map-filename1.map:
  148. server-non-prod:
  149. - host.mycompany.com:
  150. grains:
  151. environment: dev1
  152. # You can take profile and map templates from an alternate location
  153. # if you want to write your own.
  154. template_sources:
  155. providers: salt://salt/files/cloud.providers.d
  156. profiles: salt://salt/files/cloud.profiles.d
  157. maps: salt://salt/files/cloud.maps.d
  158. # These settings are used by the default provider templates and
  159. # only need to be set for the ones you're using.
  160. aws_key: AWSKEYIJSHJAIJS6JSH
  161. aws_secret: AWSSECRETYkkDY1iQf9zRtl9+pW+Nm+aZY95
  162. gce_project: test
  163. gce_service_account_email_address: 867543072364-orl4h2tpp8jcn1tr9ipj@developer.gserviceaccount.com
  164. rsos_user: afeawofghob
  165. rsos_tenant: tenant_id_number
  166. rsos_apikey: WFJIOJEOIGHSOFHESO
  167. rsos_regions:
  168. - ORD
  169. - DFW
  170. - IAD
  171. - SYD
  172. - HKG
  173. reactor:
  174. - 'deploy':
  175. - /srv/salt/reactors/deploy.sls
  176. ssh_roster:
  177. prod1:
  178. host: host.example.com
  179. user: ubuntu
  180. sudo: True
  181. priv: /etc/salt/ssh_keys/sshkey.pem
  182. gitfs:
  183. keys:
  184. global:
  185. # key and pub end up being the extension used on the key file. values other than key and pub are possible
  186. key: |
  187. -----BEGIN RSA PRIVATE KEY-----
  188. ...........
  189. -----END RSA PRIVATE KEY-----
  190. pub: |
  191. ...........
  192. salt_cloud_certs:
  193. aws:
  194. pem: |
  195. -----BEGIN RSA PRIVATE KEY-----
  196. ...........
  197. -----END RSA PRIVATE KEY-----
  198. gce:
  199. pem: |
  200. -----BEGIN RSA PRIVATE KEY-----
  201. ...........
  202. -----END RSA PRIVATE KEY-----
  203. salt_formulas:
  204. git_opts:
  205. # The Git options can be customized differently for each
  206. # environment, if an option is missing in a given environment, the
  207. # value from "default" is used instead.
  208. default:
  209. # URL where the formulas git repositories are downloaded from
  210. # it will be suffixed with <formula-name>.git
  211. baseurl: https://github.com/saltstack-formulas
  212. # Directory where Git repositories are downloaded
  213. basedir: /srv/formulas
  214. # Update the git repository to the latest version (False by default)
  215. update: False
  216. # Options passed directly to the git.latest state
  217. options:
  218. rev: master
  219. dev:
  220. basedir: /srv/formulas/dev
  221. update: True
  222. options:
  223. rev: develop
  224. # Options of the file.directory state that creates the directory where
  225. # the git repositories of the formulas are stored
  226. basedir_opts:
  227. makedirs: True
  228. user: root
  229. group: root
  230. mode: 755
  231. # List of formulas to enable in each environment
  232. list:
  233. base:
  234. - salt-formula
  235. - postfix-formula
  236. dev:
  237. - salt-formula
  238. - postfix-formula
  239. - openssh-formula