Minion keys not being accepted on Salt master when updated from Aria Config

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Minion keys are not being accepted on the master even though they were accepted in the Aria Config UI. 

 

Another symptom might be that one master in a cluster accepts the keys while the other does not.

Environment

Aria Config - 8.14.1+

Salt - 3005.x+ (OneDir builds)

 

Cause

There may be multiple reasons for this issue, but the most likely cause is that the Salt master is not authenticating to Aria Config.

Resolution

1. Generate a new configuration for the master plugin by running /opt/saltstack/extras-3.10/bin/sseapi-config --default-config and update your existing /etc/salt/master.d/raas.conf configuration with the new and updated values
   1. A common missing item is the latest engines config section, as well as any relevant sections related to those engines
2. Stop the Salt master
3. Log in to Aria Config as the user "root"  and delete any relevant master keys from the "Administration" -> "Master Keys" section
4. Then, on the Salt master, remove the sseapi_key.pub, sseapi_key.pem, and raas_key.pub files
5. Start the Salt master
6. Check whether you have a new key to accept in Aria Config UI

 

If any issue persists, please contact support.