Configuration Management with SaltStack - Extended Training Course

Architecture, State Routing & Access Control

• Understanding SaltStack Architecture: Insights into high-availability Master/Minion design, Syndic hierarchies, multi-Master redundancy, and core event bus concepts.
• State Management & Routing: top.sls mapping, distinguishing Pillar from Grains, conditional state execution, SLS inheritance, and managing environment branching (dev/stage/prod).
• Role and Rights Management in SaltStack: Key management (RSA/Ed25519), Access Control Lists (ACLs), SLS encryption, LDAP/AD integration, sudo-less execution patterns, and privilege escalation controls.
• Lab 1: Setting up a multi-Master Salt environment, configuring minion authentication, and establishing role-based state routing with encrypted Pillar data.

Event-Driven Automation & Extensibility

• Mastering the Reactor Concept: Exploring Reactor.sls architecture, event matching patterns, real-time auto-remediation workflows, and state-triggered automation.
• Orchestration & Workflow Management: Utilizing salt-run, orchestrate.sls, cross-node task chaining, dependency resolution, and GitOps handoff patterns.
• Developing Custom Modules, Runners, and Returners: Writing custom Python modules and runners, creating output/returner plugins, applying Jinja/Salt templating best practices, and packaging reusable formulas.
• Lab 2: Constructing a reactor-driven auto-provisioning workflow, developing custom runners for service discovery, and implementing a mock returner for centralized metrics.

Troubleshooting, Monitoring & Enterprise Scaling

• Diagnosing Salt Workflows: Using debug modes (salt -l debug), analyzing state execution failures, addressing network/firewall considerations, minion recovery, and resolving high-load state compilation issues.
• Job Management (Monitoring): Understanding job cache architecture, queue management, saltutil commands, monitoring orchestration, and integrating with Prometheus/Grafana or ELK stacks.
• Performance Tuning: Optimizing Master/minion settings (multiprocessing, cache sizing), file server enhancements (gitfs/s3fs/glusterfs), state compilation caching, and scaling strategies for environments with 10k+ nodes.
• Capstone: Executing an end-to-end automation workflow covering architecture, states, reactor, monitoring, tuning, and documentation & operational runbook creation.
• Open Q&A, preparation guidance for certification (SaltStack/SALT University), and distribution of learning resources.