Error "func minions.validate_trusted_minion_keys not found" in salt-master logs for RaaS

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

The salt-master service logs report the following error:

Plaintext
func minions.validate_trusted_minion_keys not found
This issue occurs when the sseapi_keyaccept engine is enabled in the RaaS configuration. You can verify the currently enabled engines by running the sseapi-config --all command, which may display output similar to the following:

Plaintext
Enable SSE engines
engines:

• sseapi: {}
• eventqueue: {}
• rpcqueue: {}
• jobcompletion: {}
• tgtmatch: {}
• sseapi_cache: {}
• sseapi_masterfs: {}
• sseapi_keyaccept: {}

Environment

• RaaS 8.18.3

• Salt Master

Cause

The sseapi_keyaccept engine is a background process designed to synchronize Minion key management between the RaaS User Interface and the local Salt Master. If an administrator accepts, rejects, or deletes a Minion key in the RaaS web console, this engine polls the RaaS server for those actions and executes the underlying salt-key commands on the Master.

The sseapi_keyaccept engine is not used or required in the default RaaS 8.18.3 installation provided via Salt states. Leaving it enabled causes the Salt Master to perform unnecessary background polling against the RaaS server, which consumes resources and generates the missing function error.

Resolution

To optimize the Salt Master's performance and stop the error, disable the sseapi_keyaccept and sseapi_masterfs engines.

1. Open the RaaS configuration file, which is typically located at /etc/salt/master.d/raas.conf.

2. Locate the sseapi_keyaccept and sseapi_masterfs engines, along with their specific configuration blocks.

3. Add a hash (#) at the beginning of the relevant lines to comment them out.

4. Restart the salt-master service to apply the configuration changes.