使用salt-api来搭建salt自动化平台
一、介绍
通常使用saltstack都是在master的服务器上直接命令操作，这个对于运维人员来说不是什么大事，但是也会有出错的时候，而一旦出错，就会有不可挽回的后果。
二、框架
这里使用django框架，通过对salt-api的封装，传入命令，执行api，将结果返回到页面上显示。注意：为了防止误操作，我们对传入的命令进行了检查，所有被定义的危险命令将不会被执行。（我这里为了简单，所以定义了可以被执行的命令。），前端使用了jquery+ajax的方式来不刷新页面就将结果显示在页面上的方式。
三、salt-api的安装
网上教程很多，我这里就不再废话了。
四、django代码
1）、整体结构
2）、salt_api.py（这里参照了github上dzhops的代码）
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
# -*- coding: utf-8 -*-import urllib2, urllib, json
import requests
import json
import ssl
ssl._create_default_https_context = ssl._create_unverified_context
class SaltAPI(object):
def __init__(self, url, username, password):
self.__url = url.rstrip('/')
self.__user = username
self.__password = password
self.__token_id = self.saltLogin()
def saltLogin(self):
params = {'eauth': 'pam', 'username': self.__user, 'password': self.__password}
encode = urllib.urlencode(params)
obj = urllib.unquote(encode)
headers = {'X-Auth-Token': ''}
url = self.__url + '/login'
req = urllib2.Request(url, obj, headers)
opener = urllib2.urlopen(req)
content = json.loads(opener.read())
try:
token = content['return'][0]['token']
return token
except KeyError:
raise KeyError
def postRequest(self, obj, prefix='/'):
url = self.__url + prefix
headers = {'X-Auth-Token': self.__token_id}
req = urllib2.Request(url, obj, headers)
opener = urllib2.urlopen(req)
content = json.loads(opener.read())
return content
def masterToMinionContent(self, tgt, fun, arg):
'''
Master控制Minion，返回的结果是内容，不是jid；
目标参数tgt是一个如下格式的字符串：'*' 或 'zhaogb-201'
'''
if tgt == '*':
params = {'client': 'local', 'tgt': tgt, 'fun': fun, 'arg': arg}
else:
params = {'client': 'local', 'tgt': tgt, 'fun': fun, 'arg': arg, 'expr_form': 'list'}
obj = urllib.urlencode(params)
content = self.postRequest(obj)
result = content['return'][0]
return result
def allMinionKeys(self):
'''
返回所有Minion keys；
分别为 已接受、待接受、已拒绝；
:return: [u'local', u'minions_rejected', u'minions_denied', u'minions_pre', u'minions']
'''
params = {'client': 'wheel', 'fun': 'key.list_all'}
obj = urllib.urlencode(params)
content = self.postRequest(obj)
minions = content['return'][0]['data']['return']['minions']
minions_pre = content['return'][0]['data']['return']['minions_pre']
minions_rej = content['return'][0]['data']['return']['minions_rejected']
# return minions, minions_pre, minions_rej
return minions
def actionKyes(self, keystrings, action):
'''
对Minion keys 进行指定处理；
:param keystrings: 将要处理的minion id字符串；
:param action: 将要进行的处理，如接受、拒绝、删除；
:return:
{"return": [{"tag": "salt/wheel/20160322171740805129", "data": {"jid": "20160322171740805129", "return": {}, "success": true, "_stamp": "2016-03-22T09:17:40.899757", "tag": "salt/wheel/20160322171740805129", "user": "zhaogb", "fun": "wheel.key.delete"}}]}
'''
func = 'key.' + action
params = {'client': 'wheel', 'fun': func, 'match': keystrings}
obj = urllib.urlencode(params)
content = self.postRequest(obj)
ret = content['return'][0]['data']['success']
return ret
def acceptKeys(self, keystrings):
'''
接受Minion发过来的key；
:return:
'''
params = {'client': 'wheel', 'fun': 'key.accept', 'match': keystrings}
obj = urllib.urlencode(params)
content = self.postRequest(obj)
ret = content['return'][0]['data']['success']
return ret
def deleteKeys(self, keystrings):
'''
删除Minion keys；
:param node_name:
:return:
'''
params = {'client': 'wheel', 'fun': 'key.delete', 'match': keystrings}
obj = urllib.urlencode(params)
content = self.postRequest(obj)
ret = content['return'][0]['data']['success']
return ret
|
3）、views.py
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
# -*- coding: utf-8 -*-from __future__ import unicode_literals
from django.shortcuts import render
from django.shortcuts import HttpResponse,HttpResponseRedirect,render_to_response
from models import *
from saltapi import salt_api
from django.http import JsonResponse
import json
def index(request):
accect = []
context = accect_cmd.objects.values()
for i in context:
accect.append(i["command"])
if request.method == "POST":
key = request.POST.get('key')
cmd = request.POST.get('cmd')
if cmd.split( )[0] in accect:
spi = salt_api.SaltAPI('https://ip:8000', 'username', 'password')
result2 = spi.masterToMinionContent(key, 'cmd.run', cmd)
return JsonResponse(result2, safe=False)
else:
data = {key:"请检查命令是否正确或命令超权限，请联系管理员！"}
return JsonResponse(data, safe=False)
else:
return render_to_response('index.html')
|
4）、models.py
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
# -*- coding: utf-8 -*-from __future__ import unicode_literals
from django.db import models
# Create your models here.class accect_cmd(models.Model):
command = models.CharField(max_length=50, unique=True, verbose_name=u'命令')
status = models.CharField(max_length=20, verbose_name=u'状态')
def __unicode__(self):
return u'{0} {1}'.format(self.command, self.status)
class SaltReturns(models.Model):
fun = models.CharField(max_length=50)
jid = models.CharField(max_length=255)
return_field = models.TextField(db_column='return')
success = models.CharField(max_length=10)
full_ret = models.TextField()
alter_time = models.DateTimeField()
class Meta:
managed = False
db_table = 'salt_returns'
def __unicode__(self):
return u'%s %s %s' % (self.jid, self.id, self.return_field)
class record(models.Model):
time = models.DateTimeField(u'时间', auto_now_add=True)
comment = models.CharField(max_length=128, blank=True, default='', null=True, verbose_name=u"记录")
def __unicode__(self):
return u'%s %s' % (self.time, self.comment)
|
5）、index.html
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
<!DOCTYPE html><html lang="en">
<head>
<meta charset="UTF-8">
<title>salt平台</title>
<script src="/static/jquery-2.1.1.min.js"></script>
</head>
<body>
<form action="/salt/index/" method="POST" id="form">
<div>主机：<input type="text" name="key" value="" id="a" style="width: 200px"></div>
<div>命令：<input type="text" name="cmd" value="" id="b" style="width: 200px"></div>
<div><button type="button" id="fb">执行</button></div>
<div style="height: 300px;margin-top: 15px;">
<textarea type="text" style="width: 60%;height: 300px" disabled="disabled" class="left" name="comment" id="c"></textarea>
</div>
</form>
</body>
<script>
$("#fb").click(function () {
$.post("/salt/index/",{
key:$("#a").val(),
cmd: $("#b").val(),
},
function (response,status,xhr) {
$("#c").html('')
$.each(response,function (key,val) {
var c = "\r\n"+key+ ":\r\n" + val;
$("#c").append(c);
})
}
)
})
</script>
</html>
|
五、效果
1）、单个key执行
2）、多个key执行
3）、当命令不被许可时：
六、总结
写的比较简陋，而且现在这个版本并不支持类似于192.168.1.1+，192.168.1.*这种正则匹配，后续会继续增加。
本文转自 sykmiao 51CTO博客，原文链接：http://blog.51cto.com/syklinux/1981943，如需转载请自行联系原作者