doubletwist13 / template-formula Goto Github PK

While some formulas are designed to be applied to ALL minions, some are only meant to be deployed to a certain subset of minions, for example an apache-formula shouldn't ever need to run on a server that isn't a web server, or on a server that is using nginx.

So we need to add an 'enable' parameter/pillar.

Default Formula to apply to all systems

To make a formula default to apply to all systems we can set:
parameters/default.yaml

values: 
  enable: True

Then for any minions that are an exception we can set pillar:

TEMPLATE:
  lookup:
    enabled: False

Default Formula to NOT apply to all systems

On the other hand to make a formula default to not apply unless needed by a role we can set:
parameters/default.yaml

values: 
  enable: False

Then for any minions that are an exception we can set pillar:

TEMPLATE:
  lookup:
    enabled: True

Why?

This allows us to more safely run ad-hoc commands from the CLI and helps protect us from doing something stupid like:
salt -C 'somenonapacheminion' state.apply apache