一、系统环境

cat /etc/redhat-release 

CentOS Linux release 7.3.1611 (Core)


二、安装及配置

1、salt-api所有操作均在master端

yum -y install salt-api pyOpenSSL  

  

2、配置salt-api

修改/etc/salt/master文件

sed -i '/#default_include/s/#default/default/g' /etc/salt/master  


如果没有目录需要创建

mkdir /etc/salt/master.d  


3、创建用于salt-api的用户

useradd -M -s /sbin/nologin saltapi  

echo 'saltapi' | passwd saltapi --stdin  


4、新增配置文件api.conf、eauth.conf


vim /etc/salt/master.d/api.conf  

rest_cherrypy:  

  port: 8000  

  ssl_crt: /etc/pki/tls/certs/localhost.crt  

  ssl_key: /etc/pki/tls/certs/localhost.key  


vim /etc/salt/master.d/eauth.conf  

external_auth:  

  pam:  

    saltapi:  

      - .*  

      - '@wheel'  

      - '@runner' 


5、生成自签名证书

salt-call tls.create_self_signed_cert  


6、重启salt-master

systemctl restart salt-master.service


7、启动salt-api

systemctl restart salt-api


查看是否启动8000端口

netstat -tnlp |grep 8000

tcp        0      0 0.0.0.0:8000            0.0.0.0:*               LISTEN      11042/python 


三、Salt-api的使用方法

1、使用curl 获取token

 curl -k https://172.16.8.200:8000/login -H "Accept: application/x-yaml"  -d username='saltapi' -d password='saltapi'  -d eauth='pam'

return:

- eauth: pam

  expire: 1503412552.298529

  perms:

  - .*

  - '@wheel'

  - '@runner'

  start: 1503369352.298528

  token: a30a9b669696402888d67ce857626799a89d8992

  user: saltapi


获取token后就可以使用token通信

注：重启salt-api后token改变


2、测试minion端的联通性

salt '*' test.ping

curl -k https://172.16.8.200:8000 -H "Accept: application/x-yaml" -H "X-Auth-Token: a30a9b669696402888d67ce857626799a89d8992" -d client='local' -d tgt='*' -d fun='test.ping'  


执行结果： 

curl -k https://172.16.8.200:8000 -H "Accept: application/x-yaml" -H "X-Auth-Token: a30a9b669696402888d67ce857626799a89d8992" -d client='local' -d tgt='*' -d fun='test.ping'  

return:

- zabbix-grafana: true


3、执行远程命令

salt '*' cmd.run df -h

curl -k https://172.16.8.200:8000 -H "Accept: application/x-yaml" -H "X-Auth-Token: a30a9b669696402888d67ce857626799a89d8992" -d client='local' -d tgt='*' -d fun='cmd.run' -d arg='df -h' 


执行结果：

curl -k https://172.16.8.200:8000 -H "Accept: application/x-yaml" -H "X-Auth-Token: a30a9b669696402888d67ce857626799a89d8992" -d client='local' -d tgt='*' -d fun='cmd.run' -d arg='df -h' 

return:

- zabbix-grafana: 'Filesystem      Size  Used Avail Use% Mounted on


    /dev/sda5        98G   80G   19G  82% /


    devtmpfs        3.9G     0  3.9G   0% /dev


    tmpfs           3.9G   28K  3.9G   1% /dev/shm


    tmpfs           3.9G   81M  3.8G   3% /run


    tmpfs           3.9G     0  3.9G   0% /sys/fs/cgroup


    /dev/sda2       497M  129M  368M  26% /boot


    tmpfs           783M     0  783M   0% /run/user/0'