Saltstack生产案例之Haproxy安装

cd /srv/salt/prod/

mkdir haproxy
mkdir keepalived
mkdir nginx
mkdir php
mkdir memcached
mkdir pkg

cd pkg

vim make.sls

make-pkg:

  pkg.installed:

    - pkgs:

      - gcc

      - gcc-c++

      - glibc

      - make

      - autoconf

      - openssl

      - openssl-devel

      - pcre

      - pcre-devel

先安装一遍haproxy取得配置文件等信息

cd /srv/salt/prod/haproxy/files/

把haproxy安装包拷贝到这个目录

cp /root/tools/haproxy-1.6.3.tar.gz /usr/local/src/

解压 haproxy

make TARGET=linux2628
make install TARGET=linux2628 PREFIX=/usr/local/haproxy-1.6.3

ln -s /usr/local/haproxy-1.6.3/ /usr/local/haproxy

由于不是默认安装需要修改启动脚本

cd /srv/salt/prod/haproxy/files/haproxy-1.6.3/examples

vim haproxy.init

拷贝

cp haproxy.init /srv/salt/prod/haproxy/files

cd /srv/salt/prod/haproxy

vim install.sls

include:

  - pkg.make

haproxy-install:

  file.managed:

    - name: /usr/local/src/haproxy-1.6.3.tar.gz

    - source: salt://haproxy/files/haproxy-1.6.3.tar.gz

    - mode: 755

    - user: root

    - group: root

  cmd.run:

    - name: cd /usr/local/src && tar zxf haproxy-1.6.3.tar.gz && cd haproxy-1.6.3 && make TARGET=linux2628 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy && ln -s /usr/local/haproxy-1.6.3 /usr/local/haproxy

    - require:

      - pkg: make-pkg

      - file: haproxy-install

可以执行安装试一下了

salt '10-8-86-172' state.sls haproxy.install saltenv=prod

PS：注意路径，默认使用base可以在后面加saltenv=prod使用prod

每次执行都会执行一次这个命令，这样不合理

继续学习状态间关系

1，unless 如果unless后面返回的值为真就不执行cmd.run - unless: test -L /usr/local/haproxy

2，onlyif

再完善一下

include:

  - pkg.make

haproxy-install:

  file.managed:

    - name: /usr/local/src/haproxy-1.6.3.tar.gz

    - source: salt://haproxy/files/haproxy-1.6.3.tar.gz

    - mode: 755

    - user: root

    - group: root

  cmd.run:

    - name: cd /usr/local/src && tar zxf haproxy-1.6.3.tar.gz && cd haproxy-1.6.3 && make TARGET=linux2628 PREFIX=/usr/local/haproxy && make install PREFIX=/usr/local/haproxy && ln -s /usr/local/haproxy-1.6.3 /usr/local/haproxy

    - unless: test -L /usr/local/haproxy

    - require:

      - pkg: make-pkg

      - file: haproxy-install

/etc/init.d/haproxy:

  file.managed:

    - source: salt://haproxy/files/haproxy.init

    - mode: 755

    - user: root

    - group: root

    - require_in:

      - file: haproxy-install

net.ipv4.ip_nonlocal_bind:

  sysctl.present:

    - value: 1

/etc/haproxy:

  file.directory:

    - user: root

    - group: root

    - mode: 755

~

PS：net.ipv4.ip_nonlocal_bind:

sysctl.present:

- value: 1

是允许ip4监听

业务引用

把结构做一个调整新建两个目录一个cluster 一个modules

把之前建立的文件夹全部放入modules（所有的基础模块放在这里）业务放在cluster

刚刚的install.sls路径也需要修改

可以执行代表设置成功

salt '10-8-86-172' state.sls modules.haproxy.install saltenv=prod

业务引用

/srv/salt/prod/cluster

mkdir files
cd files/

vim haproxy-outside.cfg

option http-keep-alive

maxconn 100000

mode http

timeout connect 5000ms

timeout client  50000ms

timeout server 50000ms

listen stats

mode http

bind 0.0.0.0:8888

stats enable

stats uri     /haproxy-status

stats auth    haproxy:saltstack

frontend frontend_www_example_com

bind 192.168.56.21:80

mode http

option httplog

log global

    default_backend backend_www_example_com

backend backend_www_example_com

option forwardfor header X-REAL-IP

option httpchk HEAD / HTTP/1.0

balance source

server web-node1  192.168.56.21:8080 check inter 2000 rise 30 fall 15

server web-node2  192.168.56.22:8080 check inter 2000 rise 30 fall 15

cd /srv/salt/prod/cluster

vim haproxy-outside.sls

include:

  - modules.haproxy.install

haproxy-service:

  file.managed:

    - name: /etc/haproxy/haproxy.cfg

    - source: salt://cluster/files/haproxy-outside.cfg

    - user: root

    - group: root

    - mode: 644

  service.running:

    - name: haproxy

    - enable: True

    - reload: True

    - require:

      - cmd: haproxy-install

    - watch:

      - file: haproxy-service

在top里面定义

vim /srv/salt/base/top.sls

base:

  '*':

    - init.init

prod:

  '*':

    - cluster.haproxy-outside

执行高级状态

salt '10-8-86-172' state.highstate

巴特西

Saltstack生产案例之Haproxy安装

最新文章

热门文章