抛错信息如下:
The Salt Master has rejected this minion's public key! To repair this issue, delete the public key for this minion on the Salt Master and restart this minion.
处理方法:
1 在salt master 上所有节点删除对应minion的minion_id值,/etc/salt/pki/master/minions(注意是所有master节点)
2 在minion机器上删除/etc/salt/pki/minion下的密钥文件(可不做)
3 重启salt-minion
补:
1 minion端生成一个秘钥对,并产生一个ID值,minion服务会安装ID值命名的公钥发送给 master ,直到接受为止
2 master认证完毕后,会将minion 端发送来的,以ID值命名的公钥存放在 /etc/salt/pki/master/minions 目录中
3 master认证完毕后,会将自身的公钥发送给 minion,并存储为 /etc/salt/pki/minion/minion_master.pub.
•master 秘钥对默认存储在/etc/salt/pki/master/master.pub /etc/salt/pki/master/master.pem(salt master私钥)
•master 端认证的公钥存储在:/etc/salt/pki/master/minions/
•minion 秘钥对默认存储在/etc/salt/pki/minion/minion.pub /etc/salt/pki/minion/minion.pem(salt minion私钥)
•minion 存放的master公钥/etc/salt/pki/minion/minion_master.pub
----总之用谁的私钥加密文件,就用谁的公钥解密,反之用谁的公钥加密文件,就用谁的私钥解密。这点在salt上一样如此。