2011-03-29 04:59:54 +00:00
|
|
|
##### Primary configuration settings #####
|
|
|
|
##########################################
|
2011-03-05 03:27:32 +00:00
|
|
|
# The address of the interface to bind to
|
|
|
|
#interface: 0.0.0.0
|
2011-03-29 05:34:54 +00:00
|
|
|
|
2011-03-05 03:27:32 +00:00
|
|
|
# The port used by the publisher
|
|
|
|
#publish_port: 4505
|
2011-03-29 05:34:54 +00:00
|
|
|
|
|
|
|
# The number of worker threads to start, these threads are used to manage
|
|
|
|
# return calls made from minions to the master, if the master seems to be
|
|
|
|
# running slowly, increase the number of threads
|
2011-03-05 03:27:32 +00:00
|
|
|
#worker_threads: 5
|
2011-03-29 05:34:54 +00:00
|
|
|
|
2011-03-05 03:27:32 +00:00
|
|
|
# The port used by the communication interface
|
|
|
|
#ret_port: 4506
|
2011-03-29 05:34:54 +00:00
|
|
|
|
2011-06-21 01:29:26 +00:00
|
|
|
# The root directory prepended to these options: pki_dir, cachedir, log_file.
|
|
|
|
#root_dir: /
|
|
|
|
|
2011-03-05 03:27:32 +00:00
|
|
|
# Directory used to store public key data
|
|
|
|
#pki_dir: /etc/salt/pki
|
2011-03-29 05:34:54 +00:00
|
|
|
|
2011-03-05 03:27:32 +00:00
|
|
|
# Directory to store job and cache data
|
|
|
|
#cachedir: /var/cache/salt
|
2011-03-29 05:34:54 +00:00
|
|
|
|
2011-03-25 03:59:01 +00:00
|
|
|
# Set the number of hours to keep old job information
|
|
|
|
#keep_jobs: 24
|
2011-03-29 04:59:54 +00:00
|
|
|
|
2011-08-27 14:51:38 +00:00
|
|
|
# Set the directory used to hold unix sockets
|
|
|
|
#sock_dir: /tmp/salt-unix
|
2011-03-29 04:59:54 +00:00
|
|
|
|
|
|
|
##### Security settings #####
|
|
|
|
##########################################
|
2011-03-10 15:55:48 +00:00
|
|
|
# Enable "open mode", this mode still maintains encryption, but turns off
|
|
|
|
# authentication, this is only intended for highly secure environments or for
|
|
|
|
# the situation where your keys end up in a bad state. If you run in open more
|
|
|
|
# you do so at your own risk!
|
|
|
|
#open_mode: False
|
2011-03-29 05:34:54 +00:00
|
|
|
|
2011-03-25 01:19:10 +00:00
|
|
|
# Enable auto_accept, this setting will automatically accept all incoming
|
|
|
|
# public keys from the minions
|
|
|
|
#auto_accept: False
|
2011-03-29 04:59:54 +00:00
|
|
|
|
2011-05-27 04:30:38 +00:00
|
|
|
##### State System settings #####
|
|
|
|
##########################################
|
|
|
|
# The state system uses a "top" file to tell the minions what environment to
|
|
|
|
# use and what modules to use. The state_top file is defined relative to the
|
|
|
|
# root of the base environment
|
|
|
|
#state_top: top.yml
|
2011-05-28 19:40:37 +00:00
|
|
|
#
|
|
|
|
# The renderer to use on the minions to render the state data
|
|
|
|
#renderer: yaml_jinja
|
2011-03-29 04:59:54 +00:00
|
|
|
|
2011-05-21 23:11:21 +00:00
|
|
|
##### File Server settings #####
|
|
|
|
##########################################
|
2011-05-26 10:22:37 +00:00
|
|
|
# Salt runs a lightweight file server written in zeromq to deliver files to
|
2011-05-21 23:11:21 +00:00
|
|
|
# minions. This file server is built into the master daemon and does not
|
2011-05-26 10:22:37 +00:00
|
|
|
# require a dedicated port.
|
2011-05-21 23:11:21 +00:00
|
|
|
|
2011-05-27 04:30:38 +00:00
|
|
|
# The file server works on environments passed to the master, each environment
|
|
|
|
# can have multiple root directories, the subdirectories in the multiple file
|
|
|
|
# roots cannot match, otherwise the downloaded files will not be able to be
|
|
|
|
# reliably ensured. A base environment is required to house the top file
|
|
|
|
# Example:
|
2011-05-27 05:35:45 +00:00
|
|
|
# file_roots:
|
2011-05-28 18:12:05 +00:00
|
|
|
# base:
|
2011-05-27 04:30:38 +00:00
|
|
|
# - /srv/salt/
|
2011-05-28 18:12:05 +00:00
|
|
|
# dev:
|
2011-05-27 04:30:38 +00:00
|
|
|
# - /srv/salt/dev/services
|
|
|
|
# - /srv/salt/dev/states
|
2011-05-28 18:12:05 +00:00
|
|
|
# prod:
|
2011-05-27 04:30:38 +00:00
|
|
|
# - /srv/salt/prod/services
|
|
|
|
# - /srv/salt/prod/states
|
|
|
|
#
|
|
|
|
# Default:
|
|
|
|
#file_roots:
|
2011-05-28 18:12:05 +00:00
|
|
|
# base:
|
2011-05-27 04:30:38 +00:00
|
|
|
# - /srv/salt
|
2011-05-21 23:11:21 +00:00
|
|
|
|
|
|
|
# The hash_type is the hash to use when discovering the hash of a file on
|
|
|
|
# the master server, the default is md5, but sha1, sha224, sha256, sha384
|
|
|
|
# and sha512 are also supported.
|
|
|
|
#hash_type: md5
|
|
|
|
|
|
|
|
# The buffer size in the file server can be adjusted here:
|
|
|
|
#file_buffer_size: 1048576
|
|
|
|
|
2011-08-27 17:08:59 +00:00
|
|
|
##### Syndic settings #####
|
|
|
|
##########################################
|
|
|
|
# The Salt syndic is used to pass commands through a master from a higher
|
|
|
|
# master. Using the syndic is simple, if this is a master that will have
|
|
|
|
# syndic servers(s) below it set the "order_masters" setting to True, if this
|
|
|
|
# is a master that will be running a syndic daemon for passthrough the
|
|
|
|
# "syndic_master" setting needs to be set to the location of the master server
|
|
|
|
# to recieve commands from
|
|
|
|
#
|
|
|
|
# Set the order_masters setting to True if this master will command lower
|
|
|
|
# masters' syndic interfaces
|
|
|
|
#order_masters: False
|
|
|
|
#
|
|
|
|
# If this master will be running a salt syndic daemon, then the syndic needs
|
|
|
|
# to know where the master it is recieving commands from is, set it with the
|
|
|
|
# syndic_master value
|
|
|
|
#syndic_master: masterofmaster
|
|
|
|
|
2011-07-30 04:50:17 +00:00
|
|
|
##### Peer Publish settings #####
|
|
|
|
##########################################
|
|
|
|
# Salt minions can send commands to other minions, but only if the minion is
|
|
|
|
# allowed to. By default "Peer Publication" is disabled, and when enabled it
|
|
|
|
# is enabled for specific minions and specific commands. This allows secure
|
|
|
|
# compartmentalization of commands based on individual minions.
|
|
|
|
#
|
|
|
|
# The configuration uses regular expressions to match minions and then a list
|
|
|
|
# of regular expressions to match functions, the following will allow the
|
|
|
|
# minion authenticated as foo.example.com to execute functions from the test
|
|
|
|
# and pkg modules
|
|
|
|
# peer:
|
|
|
|
# foo.example.com:
|
|
|
|
# - test.*
|
|
|
|
# - pkg.*
|
|
|
|
#
|
|
|
|
# This will allow all minions to execute all commands:
|
|
|
|
# peer:
|
|
|
|
# .*:
|
|
|
|
# - .*
|
|
|
|
# This is not recomanded, since it would allow anyone who gets root on any
|
|
|
|
# single minion to instantly have root on all of the minions!
|
|
|
|
#
|
|
|
|
|
2011-03-29 04:59:54 +00:00
|
|
|
##### Cluster settings #####
|
|
|
|
##########################################
|
|
|
|
# Salt supports automatic clustering, salt creates a single ip address which
|
|
|
|
# is shared among the individual salt components using ucarp. The private key
|
|
|
|
# and all of the minion keys are maintained across the defined cluster masters
|
2011-05-26 10:22:37 +00:00
|
|
|
# The failover service is automatically managed via these settings
|
2011-03-29 05:34:54 +00:00
|
|
|
|
|
|
|
# List the identifiers for the other cluster masters in this manner:
|
|
|
|
# [saltmaster-01.foo.com,saltmaster-02.foo.com,saltmaster-03.foo.com]
|
|
|
|
# The members of this master array must be running as salt minions to
|
|
|
|
# facilitate the distribution of cluster information
|
2011-03-29 04:59:54 +00:00
|
|
|
#cluster_masters: []
|
2011-03-29 05:34:54 +00:00
|
|
|
|
2011-04-02 00:35:55 +00:00
|
|
|
# The cluster modes are "paranoid" and "full"
|
|
|
|
# paranoid will only distribute the accepted minion public keys.
|
|
|
|
# full will also distribute the master private key.
|
|
|
|
#cluster_mode: paranoid
|
2011-03-29 04:59:54 +00:00
|
|
|
|
|
|
|
|
|
|
|
##### Logging settings #####
|
|
|
|
##########################################
|
|
|
|
# The location of the master log file
|
2011-03-25 03:53:47 +00:00
|
|
|
#log_file: /var/log/salt/master
|
2011-05-26 10:22:37 +00:00
|
|
|
# The level of messages to send to the log file.
|
|
|
|
# One of 'info', 'quiet', 'critical', 'error', 'debug', 'warning'.
|
|
|
|
# Default: 'warning'
|
|
|
|
#log_level: warning
|
|
|
|
#
|
|
|
|
# Logger levels can be used to tweak specific loggers logging levels.
|
|
|
|
# Imagine you want to have the salt library at the 'warning' level, but, you
|
|
|
|
# still wish to have 'salt.modules' at the 'debug' level:
|
|
|
|
# log_granular_levels: {
|
|
|
|
# 'salt': 'warning',
|
|
|
|
# 'salt.modules': 'debug'
|
|
|
|
# }
|
|
|
|
#
|
|
|
|
#log_granular_levels: {}
|