Operations grimoire/Salt

From Nasqueron Agora

Salt is used for deployment. Configuration can be found in the rOPS repository.

Keys

Master

master.pub:  67:8b:e6:b2:7b:73:5b:f1:50:f4:48:38:9a:4c:1c:31:e1:b7:6e:eb:9f:47:98:40:1f:53:29:9e:86:bb:83:38

This fingerprint should be used by minions in the `master_finger` value in configuration file.

It can be updated running salt-call --local key.finger from Complector.

Troubleshoot

Request timeout

Symptoms on master
The minion doesn't reply with job result
Symptoms on minion
When running through salt-call, output shows SaltReqTimeoutError, retrying. (1/7).
Possible cause and solutions
The master key has expired on the minion: remove it on the minion with rm /etc/salt/pki/minion/minion_master.pub. If you can repro faithfully a scenario with this issue, add more details at https://github.com/saltstack/salt/issues/46923