Aria config minion is automatically denied by the salt master after upgrading master
search cancel

Aria config minion is automatically denied by the salt master after upgrading master

book

Article ID: 381790

calendar_today

Updated On:

Products

VMware Aria Suite

Issue/Introduction

Ater upgrading the master, Aria Config minion is automatically denied by salt master.  It shows as both "Denied" and "Unaccepted"

Running salt-key -L shows something similar to the following output:

[root@salt-master ~]# salt-key -L
Accepted Keys:
salt-master
Denied Keys:
salt-minion01
Unaccepted Keys:
salt-minion01
Rejected Keys:

Removing the key and reaccepting does not resolve the issue.

Environment

Aria Automation Config (AAC) 8.16.x and lower
Salt 3006.7 and lower

Cause

Caused by a new line not being cleaned up in minion keys, which is resolved in 3006.8

Resolution

Upgrade the salt-master and minion to salt 3006.8 or higher (Long Term Release version 3006.9 is recommended) as per the documented Install Directions:
https://saltproject.io/blog/salt-project-package-repo-migration-and-guidance/ 

After upgrading the salt-master and the affected salt-minion, while the salt-minion is stopped, delete the minion keys from the master:

salt-key -d minion_name

Start and enable the salt-minion service:
systemctl start salt-minion 
systemctl enable salt-minion

The check keys on the master:
salt-key -L 

Verify that it only comes in as "Unaccepted" this time

Run this to accept:
salt-key -a minion_name

Verify that it is now accepted:
salt-key -L