salt-api配置

yum install -y salt-api
yum install pyOpenSSL  这个用于salt-api生成证书 
rpm -qa grep  cherry

salt-call --local tls.create_self_signed_cert   创建证书

配置master

- interface：master的ip地址

- default_include: master.d/*.conf

配置master.d/api.conf

rest_cherrypy:
  host: 192.168.56.101
  port: 8000
  ssl_crt: /etc/pki/tls/certs/localhost.crt
  ssl_key: /etc/pki/tls/certs/localhost.key

配置master.d/auth.conf

external_auth:
  pam:
  saltapi:
  - .*
  - '@wheel'
  - '@runner'
  - '@jobs'

创建用户，并设置密码

useradd -M -s /sbin/nologin saltapi

获取token

curl -k http://192.168.56.101:8000/login -H "Accept: application/x-yaml"  -d username='saltapi'  -d password='123456'  -d eauth='pam'

return:
- eauth: pam
expire: 1537666359.946371
perms:
- .*
- '@wheel'
- '@runner'
- '@jobs'
start: 1537623159.94637
token: 3f77ba049c7874dd435b3ed2d370845e28648c4f
user: saltapi

测试ping

curl -ik http://192.168.56.101:8000/  -H "Accept: application/json"  -H "X-Auth-Token:9ed34f06****f72976ef59bb5f4fa9"  -d client='local' -d tgt='*' -d fun="test.ping"