Configuration Management with SaltStack - Extended Training Course

Architecture, State Routing & Access Control

• SaltStack Architecture Overview: Understanding the high-availability Master/Minion design, Syndic hierarchies, multi-Master redundancy, and event bus basics
• State Management & Routing: top.sls mapping, Pillar versus Grains, conditional state execution, SLS inheritance, and environment branching (dev/stage/prod)
• Role and Rights Management in SaltStack: Key management (RSA/Ed25519), ACLs, SLS encryption, LDAP/AD integration, sudo-less execution patterns, and privilege escalation controls
• Lab 1: Setting up a multi-Master Salt environment, configuring minion authentication, and establishing role-based state routing with encrypted Pillar data

Event-Driven Automation & Extensibility

• Mastering the Reactor Concept: Reactor.sls architecture, event matching patterns, real-time auto-remediation workflows, and state-triggered automation
• Orchestration & Workflow Management: Utilizing salt-run, orchestrate.sls, cross-node task chaining, dependency resolution, and GitOps handoff patterns
• Developing Custom Modules, Runners, and Returners: Writing custom Python modules/runners, creating output/returner plugins, adopting Jinja/Salt templating best practices, and packaging/distributing reusable formulas
• Lab 2: Constructing a reactor-driven auto-provisioning workflow, developing custom runners for service discovery, and implementing a mock returner connected to a centralized metrics endpoint

Troubleshooting, Monitoring & Enterprise Scaling

• Troubleshooting Salt Workflows: Utilizing debug modes (salt -l debug), analyzing state execution failures, addressing network/firewall considerations, minion recovery, and handling high-load state compilation issues
• Job Management (Monitoring): Understanding job cache architecture, queue management, saltutil commands, monitoring orchestration, and integrating with Prometheus/Grafana or ELK stacks
• Performance Tuning: Optimizing Master/minion settings (multiprocessing, cache sizing), file server optimization (gitfs/s3fs/glusterfs), state compilation caching, and scaling strategies for environments with 10k+ nodes
• Capstone Project: End-to-end automation workflow covering architecture → states → reactor → monitoring → tuning → documentation & operational runbook creation
• Open Q&A, guidance for certification preparation (SaltStack/SALT University), and distribution of additional resources