base10/docker-salt-master repository overview

apiVersion: v1
kind: Service
metadata:
  namespace: salt-master
  name: salt-master-loadbalancer
spec:
  externalTrafficPolicy: Cluster
  loadBalancerIP: 10.10.10.10
  sessionAffinity: None
  type: LoadBalancer
  selector:
    app: salt-master
  ports:
    - protocol: TCP
      name: salt-master-zmq-4505
      port: 4505
      targetPort: 4505
    - protocol: TCP
      name: salt-master-zmq-4506
      port: 4506
      targetPort: 4506
    - protocol: TCP
      name: salt-master-api-5417
      port: 5417
      targetPort: 5417

---

apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: salt-master
  labels:
    app: salt-master
  name: salt-master
spec:
  replicas: 1
  selector:
    matchLabels:
      app: salt-master
  revisionHistoryLimit: 10
  template:
    metadata:
      labels:
        app: salt-master
    spec:
      containers:
      - image: base10/docker-salt-master:3001.1-1
        imagePullPolicy: Always
        name: salt-master
        ports:
        - containerPort: 4505
          name: 4505tcp45053
          protocol: TCP
        - containerPort: 4506
          name: 4506tcp45063
          protocol: TCP
        - containerPort: 5417
          name: 5417tcp54173
          protocol: TCP
        volumeMounts:
        - mountPath: /etc/salt/pki
          name: salt-master-nfs-claim
          subPath: pki
        - mountPath: /etc/salt/master.d
          name: salt-master-nfs-claim
          subPath: master.d
      dnsConfig:
        options:
        - name: ndots
          value: "1"
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      terminationGracePeriodSeconds: 30
      volumes:
      - name: salt-master-nfs-claim
        persistentVolumeClaim:
          claimName: salt-master-nfs-claim

this is a docker-based config, so we use the docker file path for our work
{% set saltHome = '/etc/salt' %}
  
Salt root directory:
  file.directory:
    - name: {{ saltHome }}
    - user: root
    - group: root
    
Master configuration directory:
  file.directory:
    - name: {{ saltHome }}/master.d
    - user: root
    - group: root

Deploy gitroot pubkey:
file.managed:
    - name: {{ saltHome }}/master.d/git-deploy.pub
    - contents_pillar: docker:salt:master:ssh_pubkey
    - user: root
    - group: root
    - mode: 644
Deploy gitroot privkey:
file.managed:
    - name: {{ saltHome }}/master.d/git-deploy.key
    - contents_pillar: docker:salt:master:ssh_key
    - user: root
    - group: root
    - mode: 600
Deploy gitroot conf:
file.managed:
    - name: {{ saltHome }}/master.d/gitroot.conf
    - source: salt://{{ slspath }}/gitroot.conf
    - user: root
    - group: root
    - mode: 600

Deploy salt-api config:
    file.managed:
    - name: {{ saltHome }}/master.d/salt-api.conf
    - source: salt://{{ slspath }}/salt-api.conf
    - user: root
    - group: root
    - mode: 755