Salt Master¶
Salt Master manages and orchestrates Salt Minions, applying state to minions through the use of static, Pillar (dynamic data), and Formulas (Templates). Minions can be targetted individually or grouped based on attributes (Grains) via Nodegroups.
Salt encrypts data communications, as well as providing only minion data needed to minions. Supports GPG encryption of sensitive data out of the box, no special services required.
Working assumptions:
Salt Master runs unprivileged (see: Non-root User).
Two main enivronments
prod
anddev
.Service directory structure enforces separation of
prod
anddev
environments and minimizes globally avaliable data. (see: Service Directory Best Practices).
Related Material:
Salt Master Configuration for initial Salt Master setup.
Using Pillar for basic Pillar (dynamic data) usage.
Nodegroups for grouping minions based on attributes (Grains).
State Management for managing Salt States.
State Management for managing Salt Formulas (Templates).
Minion Management for managing minions on Salt Master.
GPG Encrypt Pillar Data for GPG usage with Salt Pillar data.