Shulou(Shulou.com)06/01 Report--

The error message is as follows:

The Salt Master has rejected this minion's public key! To repair this issue, delete the public key for this minion on the Salt Master and restart this minion.

Treatment method:

1 delete the minion_ id value of the corresponding minion on all nodes on salt master, / etc/salt/pki/master/minions (note that all master nodes)

2 delete the key file under / etc/salt/pki/minion on the minion machine (but do not do it)

3 restart salt-minion

Supplement:

1. The minion side generates a secret key pair and generates an ID value. The minion service installs the public key named by the ID value and sends it to master until it is accepted.

2 after the master authentication is completed, the public key named by the ID value sent by the minion will be stored in the / etc/salt/pki/master/minions directory

3 after the master authentication is completed, the public key will be sent to minion and stored as / etc/salt/pki/minion/minion_master.pub.

The master key pair is stored by default in / etc/salt/pki/master/master.pub / etc/salt/pki/master/master.pem (salt master private key)

The master-authenticated public key is stored at: / etc/salt/pki/master/minions/

The minion key pair is stored by default in / etc/salt/pki/minion/minion.pub / etc/salt/pki/minion/minion.pem (salt minion private key)

Master public key / etc/salt/pki/minion/minion_master.pub stored in minion

-anyway, if you encrypt the file with the private key, you will decrypt it with the public key of the file, whereas you will decrypt the file with the private key of the person whose public key is used. The same is true on salt.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.