# salt-api
https://docs.saltstack.com/en/latest/topics/netapi/writing.html
1. yum install salt-api
2. yum install pyOpenSSL
3. salt-call --local tls.create_self_signed_cert
[ERROR ] You should upgrade pyOpenSSL to at least 0.14.1 to enable the use of X509 extensions
local:
Created Private Key: "/etc/pki/tls/certs/localhost.key." Created Certificate: "/etc/pki/tls/certs/localhost.crt."
4. vim /etc/salt/master.d/api.conf
rest_cherrypy:
host: 192.168.2.103
port: 8000
ssl_cert: /etc/pki/tls/certs/localhost.crt
ssl_key: /etc/pki/tls/certs/localhost.key
5. useradd -M -s /sbin/nologin saltapi # 创建用户 -M 不创建home目录 -s 仅做验证
6. echo "saltapi" | passwd saltapi --stdin # 非交互式创建密码
7. vim /etc/salt/master.d/auth.conf
external_auth:
pam:
saltapi:
- .*
- '@wheel'
- '@runner'
- '@jobs'
8. systemctl restart salt-master
9. systemctl start salt-api
10. curl -sSk http://192.168.2.103:8000/login \
-H 'Accept: application/x-yaml' \
-H 'X-Auth-Token: xxxxxxxxxxxxxxxxxxxx' \
-d username='saltapi' \
-d password='saltapi' \
-d eauth='pam'
SaltStack 九
發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.