Salt Master

Salt Master manages and orchestrates Salt Minions, applying state to minions through the use of static, Pillar (dynamic data), and Formulas (Templates). Minions can be targetted individually or grouped based on attributes (Grains) via Nodegroups.

Salt encrypts data communications, as well as providing only minion data needed to minions. Supports GPG encryption of sensitive data out of the box, no special services required.

Working assumptions:

  • Salt Master runs unprivileged (see: Non-root User).

  • Two main enivronments prod and dev.

  • Service directory structure enforces separation of prod and dev environments and minimizes globally avaliable data. (see: Service Directory Best Practices).

Related Material: