Bug ID | 1197964 |
---|---|
Summary | regression: salt-minion sign-in failure after update |
Classification | openSUSE |
Product | openSUSE Distribution |
Version | Leap 15.3 |
Hardware | x86-64 |
OS | openSUSE Leap 15.3 |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Salt |
Assignee | salt-maintainers@suse.de |
Reporter | seroton10@gmail.com |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
I use salt to manage a mixture of Leap and Tumbleweed hosts. Because salt-minions can connect to newer masters, but not the other way around, I use Tumbleweed to host my master. Since the recent upgrade to salt-minion-3002.2-150300.53.10.1.x86_64 on my Leap minions, they fail to connect to the master, with the following error (somewhat cut down, as indicated by ellipsis): Apr 02 13:22:51 dogprod salt-minion[9971]: [ERROR ] Error while bringing up minion for multi-master. Is master at master1 responding? Apr 02 13:23:01 dogprod salt-minion[9971]: [ERROR ] Sign-in attempt failed: {'enc': 'pub', 'pub_key': '-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS6pLmz10lMkgNZVUauW\nMv3GvjpiR+pQQzgXP9qgTJHhb01Hw2MM0ociT2a+GjLFq6fF9PHQ9DHDUM0aw55+\n7LYIUbrdZJ1n8J02Sknd5pfZdDjOGzsI6t409loNX98FD9EI7m1jP4iCzeSFmjrG\nWU0ZGUw2Th58ZE7zn+CFiy7Sws/B/D2yIRoKB58v+Cri9pUJMmA7T/e2/JGEKPle\nz8ENYYmx21AlTgyLZibPc7T17LgiF7od+sTlSKYW9Y/q0pKR/ZUJb9I9YIdh/eDS\nYz2cz5h41F9qMfoZFYJ0Ao6DVbAw2KbNq9Hkwyq+qdLTwEAO7AX0mbJyNlOlRK4V\n5QIDAQAB\n-----END PUBLIC KEY-----\n', 'publish_port': 4505, 'token': b"\xd6\xc75.$\n\x02\xb8\x9b\t\x89[\xe8\xbag@\x9f\xdaW\xc6\x95\xe5iB\xfd\x06\x98fD\nd}...", 'aes': b'\xa1\xab\xceu\x1eg;g\xe3\xe0\xd8\xf4g\xc7\x93\xb2\xfd\xab\xa8`\x00\xb7\xee\xee\x0f(}V|6(\x9d)\x0e\xf3...', 'sig': b'!J\xd6\xa1\x9c\xe2\xa4\xd2p\x1a\x91\x02\xeek\xae-\x95\xa1\x8b...'} I have tried to clear all caches and start with freshly generated PKI material, but it doesn't help. The minion configuration is minimal: state_output: changes state_output_diff: True master: master1 The master configuration is similarly sparse, except it also defines some GitFS sources for states and pillar data. Reverting the Leap minions back to salt-minion-3002.2-150300.53.7.2.x86_64 fixes the issue.