SaltStack Docker Containers for Junos

This project has been designed to help you to get started easily with SaltStack on Junos. In this project you'll find:

• A docker container with all SaltStack and all Junos Libraries
• Make script to easily start, stop and clean any number of docker containers
• A Use-Case with SaltStack Engine to collect Syslog from Junos and convert them into Events in SaltStack
• A Use-Case with SaltStack Beacon to monitor a Junos string in a file and convert it into Event in SaltStack

Table of Content

• SaltStack Docker Containers for Junos
• Getting Started / 'Hello World' with Engine
  • 1- Define Proxies
  • 2- Start Salt Master, Engine and Proxies Automatically
  • 4- Access Salt Master Shell
  • 5- (optional) Verify Proxy is running
• Contributer
• Known Issues

More Content

• The Use Case Engine
• The Use Case Beacon
• The Makefile
• Operation

Getting Started / 'Hello World' with Engine

1- Define Proxies

Define uc-engine/pillar/top.sls for example:

root@host# cat uc-engine/pillar/top.sls

base:
  proxy01:
    - proxy01

and associate under uc-engine/pillar/:

root@host# cat uc-engine/pillar/proxy01.sls

proxy:
   proxytype: junos
   host: 172.17.254.1
   username: admin
   passwd: juniper1

2- Start Salt Master, Engine and Proxies Automatically

Under the main directory execute:

root@host# make master-start

or

#make clean will not work if starting docker like that

root@host# docker run -d juniper/saltstack salt-master -l debug

Note: Proxies are getting automatically started within the Salt Master Engine

3- Verify

Verify that saltmaster-engine is running:

root@host# docker ps 

4- Access Salt Master Shell

root@host# make master-shell

5- (optional) Verify Proxy is running

Check if proxy01 is running under the saltmaster-engine

root@saltmaster-engine# ps -ef | grep proxy01

Contributer

• Damien Garros
• Iddo Cohen
• Nitin Kumar
• Stephen Steiner

Known Issues

• urllib3\util\ssl_.py - 'SNIMissingWarning, InsecurePlatform' Warnings: Solution is to upgrade Python from 2.7.6 to 2.7.9 or pip install pyOpenSSL ndg-httpsclient pyasn1. Please note it does not effect salt-master, salt-minion or salt-proxy, in their functionality.
• Currently netconf port 830 must be open on the Junos device Solution is to set system services netconf ssh. Please note an option for using port 22 is being added.