在使用 SaltStack 對主機(jī)進(jìn)行批量管理的時(shí)候，因?yàn)椴煌姆?wù)器組所做的業(yè)務(wù)功能不同，因此為了更加方便的管理，勢必要對主機(jī)進(jìn)行分組管理。

參考 SaltStack 的官方文檔

https://docs.saltstack.com/en/latest/topics/targeting/nodegroups.html

Nodegroups are declared using a compound target specification. The compound target documentation can be foundhere.

The nodegroups master config file parameter is used to define nodegroups. Here's an example nodegroup configuration within /etc/salt/master:

nodegroups:  group1: 'L@foo.domain.com,bar.domain.com,baz.domain.com or bl*.domain.com'  group2: 'G@os:Debian and foo.domain.com'  group3: 'G@os:Debian and N@group1'  group4:    - 'G@foo:bar'    - 'or'    - 'G@foo:baz'
Note
The L within group1 is matching a list of minions, while the G in group2 is matching specific grains. See thecompound matchers documentation for more details.
New in version 2015.8.0.
Note
Nodegroups can reference other nodegroups as seen in group3. Ensure that you do not have circular references. Circular references will be detected and cause partial expansion with a logged error message.
New in version 2015.8.0.
Compound nodegroups can be either string values or lists of string values. When the nodegroup is A string value will be tokenized by splitting on whitespace. This may be a PRoblem if whitespace is necessary as part of a pattern. When a nodegroup is a list of strings then tokenization will happen for each list element as a whole.
To match a nodegroup on the CLI, use the -N command-line option:
salt -N group1 test.ping
Note
The N@ classifier cannot be used in compound matches within the CLI or top file, it is only recognized in thenodegroups master config file parameter.
To match a nodegroup in your top file, make sure to put - match: nodegroup on the line directly following the nodegroup name.
base:  group1:    - match: nodegroup    - webserver
Note
When adding or modifying nodegroups to a master configuration file, the master must be restarted for those changes to be fully recognized.
A limited amount of functionality, such as targeting with -N from the command-line may be available without a restart.
DEFINING NODEGROUPS AS LISTS OF MINION IDS
A simple list of minion IDs would traditionally be defined like this:
nodegroups:  - group1: L@host1,host2,host3
They can now also be defined as a YAML list, like this:
nodegroups:  - group1:    - host1    - host2    - host3
New in version 2016.11.0.
USING NODEGROUPS IN SLS FILES
To use Nodegroups in Jinja logic for SLS files, the pillar_opts option in /etc/salt/master must be set to True. This will pass the master's configuration as Pillar data to each minion.
Note
If the master's configuration contains any sensitive data, this will be passed to each minion. Do not enable this option if you have any configuration data that you do not want to get on your minions.
Also, if you make changes to your nodegroups, you might need to run salt '*' saltutil.refresh_pillar after restarting the master.
Once pillar_opts is set to True, you can find the nodegroups under the "master" pillar. To make sure that only the correct minions are targeted, you should use each matcher for the nodegroup definition. For example, to check if a minion is in the 'webserver' nodegroup:
nodegroups:  webserver: 'G@os:Debian and L@minion1,minion2'
{% if grains.id in salt['pillar.get']('master:nodegroups:webserver', [])and grains.os in salt['pillar.get']('master:nodegroups:webserver', []) %}...{% endif %}
Note
If you do not include all of the matchers used to define a nodegroup, Salt might incorrectly target minions that meet some of the nodegroup requirements, but not all of them.