Highstate Directly or use Orchestration

[Sid Young]

G'Day all,

I'm building some clusters and was seeking advice on the best way to maintain the state on an ongoing basis. Normally we implement a scheduled highstate but I've been building Orchestrations to build the entire cluster and was thinking that is also a good way to maintain the state of each VM (no more than 8 VM's in a cluster).

Thoughts anyone? 

Scheduled state.highstate  or state.orchestrate ?

Sid Young

https://off-grid-engineering.com

[Simon Lundström]

We have a daily scheduled state.highstate on all minions as a “catch all”.

But more importantly we have integrated git, gitfs, fileserver and orchestrations to:

* Update git repos via gitfs fileserver

* When a repo that includes states for minion(s) a state.highstate is scheduled via an orchestration.

Basically what https://docs.saltproject.io/en/latest/topics/tutorials/gitfs.html#refreshing-gitfs-upon-push explains.

BR,

- Simon

--
You received this message because you are subscribed to the Google Groups "Salt-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to salt-users+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/salt-users/8179726d-669e-41f6-8758-5ae06b202a6cn%40googlegroups.com.

[Phipps, Thomas]

so, what i do is use orchestration to establish installed applications on a system. then different states are used and attached to a highstate using a dynamic top.sls file.

this allows the highstate to be less cumbersome than the full orchestration. as well as lets the systems be more dynamic.

I also don't schedule highstates. instead using things like watchdog beacon and the other beacons to signal different things. and use reactors to trigger a maintenance highstate.

this tends to reduce the high cost of do nothing highstates.

for my home system i pretty much have salt and a docker host. the docker host hosts a bunch of different software. but i have 2 reactors setup. one to run on a webhook that is triggered by my home assistant when it has an update. and the other to run the other triggers a state to update my letsencrypt certs  when the cers are close to expiring.

[Sid Young]

Thanks Thomas,

I was thinking the same in terms of using the Orch to do the once of install processes, keen to see if others have the same perspective.

Sid

You received this message because you are subscribed to a topic in the Google Groups "Salt-users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/salt-users/YDjrz3YTkkU/unsubscribe.
To unsubscribe from this group and all its topics, send an email to salt-users+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/salt-users/CAPaX09gX-hrLDmD2YZub9AXM7%2BvUNBbg5Xnz4FwHQ15WhEfvuA%40mail.gmail.com.