Salt Guide Overview

Salt is a remote execution engine, configuration management and orchestration system used by SUSE Multi-Linux Manager to manage clients.

In SUSE Multi-Linux Manager, the Salt master runs on the SUSE Multi-Linux Manager Server, allowing you to register and manage Salt clients.

This book is designed to be a primer for using Salt with SUSE Multi-Linux Manager.

For more information about Salt, see the Salt documentation at https://docs.saltproject.io/en/latest/contents.html.

The current version of Salt in SUSE Multi-Linux Manager is 3006.

1. Security and execution boundary

SUSE Multi-Linux Manager protects the Salt master and the Salt API from direct external access. The system permits access to the Salt API only from the internal loopback interface of the SUSE Multi-Linux Manager Server. Only Tomcat and Taskomatic services on the server can use the Salt API.

External user requests must go through the SUSE Multi-Linux Manager API or the Web UI. SUSE Multi-Linux Manager authenticates the user and checks their permissions with Role-Based Access Control (RBAC) before the system runs Salt commands. For more information about RBAC, see 역할 기반 액세스 제어(RBAC).