CODEWITHSUNDEEP
salt-project
austrum
austrum

Reputation: 223

SaltStack : is it possible to apply states on the master and if so, how?

I am a total beginner with SaltStack but I have managed to setup some states on a machine and run them on a minion.

What I have right now is a Debian machine setup with salt-master as well as another Debian setup as salt-minion.

Since I am using the salt-master also as a development machine, I would like to know if I can somehow apply the states on the master itself as well. And if so, how?

Is there a command I can run to apply the states on the master? (so far I was unable to find it)

Should I install salt-minion on the same machine as well to be able to do this and simply register the same machine as a minion on itself?

Thanks!

Upvotes: 22

Views: 13927

Answers (4)

Max Arnold
Max Arnold

Reputation: 447

It is possible to run a state file on a master without a local minion:

foo.sls:

/etc/foo.conf:
  file.managed:
    - source: salt://files/foo.conf
    - mode: 0600

To apply it, run salt-run state.orchestrate foo.

See https://docs.saltproject.io/en/latest/topics/orchestrate/orchestrate_runner.html#running-states-on-the-master-without-a-minion

Upvotes: 0

uvsmtid
uvsmtid

Reputation: 4295

Install both Minion and Master on single node

I call such node Master Minion. No steps provided - you already know it based on the question.

Some conceptual info instead:

  • In short, Master never applies states. Instead, it triggers Minions (the local Master Minion in this case).
  • Salt Minion and Master are two separate services with independent runtime & configuration.
  • While instances use common software, runtime talk over the network (location-independent).
  • If you can apply states on remote Minion, the same mechanism will be used for local Minion one as well.

Additional info

There are two ways to apply states:

  • Master-side salt command to "push" states to multiple remote minions.

    rpm -qf $(which salt)
salt-master-2015.5.3-4.fc22.noarch

  • Minion-side salt-call command to "pull" states on single local minion.

    rpm -qf $(which salt-call)
salt-minion-2015.5.3-4.fc22.noarch

Until more than one minion is involved, it's better to use salt-call for the same effect:

salt-call state.highstate

Minion-side salt-call provides advantages especially for testing, isolation, troubleshooting:

  • It makes network issues (if any) more obvious.
  • It safely applies states only on single local minion (no way to specify more than one).

  • It shows debug output directly in the local terminal:

    salt-call -l debug test.ping

The last point, salt-call--local can also be used in masterless setup using no network.

Upvotes: 7

Jason Zhu
Jason Zhu

Reputation: 2294

Since I am using the salt-master also as a development machine, I would like to know if I can somehow apply the states on the master itself as well. And if so, how?

You can do that by following the following steps:

  1. Install salt-minion on your development machine
  2. Edit /etc/salt/minion to point to your master (vi /etc/salt/minion and change the following : master: salt -> master: 127.0.0.1)
    • (optional) Edit /etc/salt/minion_id to something that is meaningful to you
  3. Start up your salt-minion
  4. Use salt-key to accept your minion's key
  5. Use your salt-master to control your minion as if it were any other salt-minion

Is there a command I can run to apply the states on the master?

The salt-master doesn't really run the the state files, the salt-minions do. If you followed the above steps then you can target your salt-master to run highstate with the following command:

salt 'the_value_of_/etc/salt/minion_id' state.highstate

Should I install salt-minion on the same machine as well to be able to do this and simply register the same machine as a minion on itself?

Yup. I think you have an idea as to what you need to do and just need a push in the right direction.

Upvotes: 23

Ming Hsieh
Ming Hsieh

Reputation: 803

Now it's near end of 2015. Let's review some more possibilities to salt master self-control:

  1. Install a minion aside with salt master on the same box

This one has been widely discussed as above two answers.

  1. Use salt-ssh + salt-run state.orchestrate

Setup steps:

Step 1: install salt-ssh

Step 2: modify roster file (e.g. /etc/salt/roster in CentOS 6). The default installation already provide you some example. Since you probably ssh into salt master, of course username / password / private key setup should not be a problem for you. For example to control salt master vagrant box, this sample should do:

localhost:
  host: 127.0.0.1
  user: vagrant
  passwd: vagrant
  sudo: True

Now, steal from official tutorial with a little bit twist:

# /srv/salt/orch/cleanfoo.sls
cmd.run:
  salt.function:
    - tgt: 'localhost'
    - ssh: 'true'
    - arg:
      - touch /tmp/test.txt

And run it with:

salt-run state.orchestrate orch.cleanfoo

Check your salt master vagrant box /tmp directory if test.txt file is there.

This approach should also work for state. Either way you need to install something. I prefer the second way since in general, calling salt master self control (to provision some work) is just a step before I actually call minion to process other state(s).

Upvotes: 4

Related Questions