Configuration Management with SaltStack - Extended Training Course

Architecture, State Routing & Access Control

• Overview of SaltStack Architecture: Understanding high-availability Master/Minion design, Syndic hierarchies, multi-Master redundancy, and core event bus principles
• State Management & Routing: Utilizing top.sls mapping, differentiating between Pillar and Grains, implementing conditional state execution, SLS inheritance, and environment branching (e.g., dev, stage, prod)
• Role and Rights Management within SaltStack: Managing keys (RSA/Ed25519), ACLs, SLS encryption, LDAP/AD integration, sudo-less execution patterns, and controlling privilege escalation
• Lab 1:: Setting up a multi-Master Salt environment, configuring minion authentication, and constructing role-based state routing with encrypted Pillar data

Event-Driven Automation & Extensibility

• Deep Dive into the Reactor Concept: Exploring Reactor.sls architecture, event matching patterns, real-time auto-remediation workflows, and state-triggered automation
• Orchestration & Workflow Management: Using salt-run, orchestrate.sls, managing cross-node task chaining, dependency resolution, and adopting GitOps handoff patterns
• Developing Custom Modules, Runners, and Returners: Writing custom Python modules and runners, creating output/returner plugins, applying best practices for Jinja/Salt templating, and packaging/distributing reusable formulas
• Lab 2:: Constructing a reactor-driven auto-provisioning workflow, developing custom runners for service discovery, and implementing a mock returner to a centralized metrics endpoint

Troubleshooting, Monitoring & Enterprise Scaling

• Troubleshooting Salt Workflows: Leveraging debug modes (salt -l debug), analyzing state execution failures, addressing network/firewall constraints, restoring minions, and resolving high-load state compilation issues
• Job Management (Monitoring): Understanding job cache architecture, queue management, utilizing saltutil commands, monitoring orchestration, and integrating with Prometheus/Grafana or ELK stacks
• Performance Tuning: Optimizing Master/minion settings (multiprocessing, cache sizing), enhancing file server performance (gitfs/s3fs/glusterfs), caching state compilation, and implementing scaling strategies for 10,000+ nodes
• Capstone Project:: Executing an end-to-end automation workflow covering architecture, states, reactor, monitoring, tuning, and creating documentation & operational runbooks
• Open Q&A, guidance on certification preparation (SaltStack/SALT University), and distribution of learning resources