Orchestration

August 22, 2023 · View on GitHub

Execution Examples

Orchestration Run

The following command does a test orchestration run of states/orch/web_host.sls:

sudo salt-run state.orchestrate orch.web_host \
    pillar='{"tgt_hst":"SERVERNAME", "tgt_pod":"core", "tgt_loc":"us-east-2"}' \
    saltenv=timidrobot test=True

pillar= is required
- Infrastructure creation is targeted with CLI pillar (pillar='{"tgt_hst":"SERVERNAME", "tgt_pod":"core", "tgt_loc":"us-east-2"}')
saltenv= is optional
- The command above uses Pillars and States from a development environment (saltenv=timidrobot). Remove or change to base to use production environment.
test= is optional
- The command above performs a dry run (test=True). Remove or changed to False to apply changes.

Troubleshooting with Salt-Call

Local Render

The following command shows how the SLS is rendered and outputs it as YAML: states/orch/aws/ec2_instance_web.sls:

sudo salt-call --local --out=yaml state.show_sls orch.aws.ec2_instance_web \
    pillar='{"tgt_hst":"SERVERNAME", "tgt_pod":"core", "tgt_loc":"us-east-2"}' \
    saltenv=timidrobot

Local Apply

The following command does a local test apply of states/orch/aws/ec2_instance_web.sls:

sudo salt-call --local --log-level=debug --log-file-level=warning \
    state.apply orch.aws.ec2_instance_web \
    pillar='{"tgt_hst":"SERVERNAME", "tgt_pod":"core", "tgt_loc":"us-east-2"}' \
    saltenv=timidrobot test=True

Using salt-call to run individual states can aid in the troubleshooting of orchestration. The salt-call command above is very verbose and allows errors to be seen in the compiled pillar and state files.

`salt-ssh`

Per Debugging salt-ssh - Salt SSH, to see errors from a salt-ssh state or command line invocation:

Assuming that orch.bootstrap install salt on minion failed

Apply the states manually with trace level logging:

sudo salt-ssh index__stage__us-east-2 -l trace --log-file-level=warning --sudo state.apply salt

Search output for SALT_ARGV
SSH into target machine from salt-prime (replace TARGET_IP with appropriate IP address):
```
sudo ssh -i /root/.ssh/saltstack_rsa_provisioning_20181221 admin@TARGET_IP
```
Execute SALT_ARGV command from step 2 without '--out json and -l quiet