salt-key issue Duplicate key

Owned by Jean-luc KRIKER
Last updated: Nov 22, 2021
2 min read


Issue 1

duplicate minion_id


 more /etc/salt/minion_id

>> change the minion_id : example branch2_node1


[root@conductor t128]# t128-salt-key
Accepted Keys:
6ae7b114-a8a2-458b-aee3-05e30d2664e3
conductor
ssrdc1_node1
Denied Keys:
Unaccepted Keys:
branch1_node1  <<<<<<<<<<< This is the mistake
Rejected Keys:
[root@conductor t128]#


After changing the minion_id:

[root@conductor t128]# t128-salt-key
Accepted Keys:
6ae7b114-a8a2-458b-aee3-05e30d2664e3
conductor
ssrdc1_node1
Denied Keys:
Unaccepted Keys:
branch1_node1  

branch2_node1  <<<<<<<<<<< New one !!!!
Rejected Keys:
[root@conductor t128]#

Issue 2
conductordoes not see the branch salt-minion key

ping the conductor / curl IP@ -k

stop the branch 128T process




serial number = mac address 
[root@branch1_node1 t128]# lshw -c network | more
  *-network:0
       description: Ethernet interface
       product: 82540EM Gigabit Ethernet Controller
       vendor: Intel Corporation
       physical id: 12
       bus info: pci@0000:00:12.0
       logical name: ens18
       version: 03
       serial: 4a:e1:dc:d1:a7:69  <<<<<<<<<<<<<<<<<<<<<< Mac address is the S/N
       size: 1Gbit/s
       capacity: 1Gbit/s
       width: 32 bits
       clock: 33MHz
       capabilities: bus_master rom ethernet physical tp 10bt 10bt-fd 100bt 100bt-fd 1000bt-fd autonegotiation
       configuration: autonegotiation=on broadcast=yes driver=e1000 driverversion=7.3.21-k8-NAPI duplex=full ip=192.168.0.
215 latency=0 link=yes multicast=yes port=twisted pair speed=1Gbit/s
       resources: irq:11 memory:feb00000-feb1ffff ioport:e080(size=64) memory:fea00000-fea3ffff


>>>>>>> ether 4a:e1:dc:d1:a7:69

[root@branch1_node1 t128]# ip add show ens18
8: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 4a:e1:dc:d1:a7:69 brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.215/24 brd 192.168.0.255 scope global noprefixroute dynamic ens18
       valid_lft 78856sec preferred_lft 78856sec
    inet6 fe80::1c38:afa9:6b87:dc86/64 scope link noprefixroute
       valid_lft forever preferred_lft forever


salt-keyon the conductor
on the conductor

t128-salt-key

t128-salt-key
[root@conductor t128]# t128-salt-key
Accepted Keys:
conductor
routerdc5_id  <<<<<< this one, created manually
Denied Keys:
Unaccepted Keys:
Rejected Keys:
[root@conductor t128]#

[root@conductor t128]# t128-salt-key
Accepted Keys:
conductor
Denied Keys:
Unaccepted Keys:
6ae7b114-a8a2-458b-aee3-05e30d2664e3  <<<<<< created automatically
Rejected Keys:
delete a key

delete key
[root@conductor t128]# t128-salt-key
Accepted Keys:
049b570d-74a8-4ada-809b-1102f666f987
157d4b0f-7c6b-401a-8360-e73535a6778d
branch1_node1
conductor
eb6eaea4-d7b7-4ac9-9d3e-52f1caf1b3b1
node1_jlk_HQs
ssrdc1_node1
Denied Keys:
Unaccepted Keys:
b9e19200-95b2-4081-b067-3fba94535c32
Rejected Keys:


[root@conductor t128]# t128-salt-key -d b9e19200-95b2-4081-b067-3fba94535c32
The following keys are going to be deleted:
Unaccepted Keys:
b9e19200-95b2-4081-b067-3fba94535c32
Proceed? [N/y] y
Key for minion b9e19200-95b2-4081-b067-3fba94535c32 deleted.


[root@conductor t128]# t128-salt-key
Accepted Keys:
049b570d-74a8-4ada-809b-1102f666f987
157d4b0f-7c6b-401a-8360-e73535a6778d
branch1_node1
conductor
eb6eaea4-d7b7-4ac9-9d3e-52f1caf1b3b1
node1_jlk_HQs
ssrdc1_node1
Denied Keys:
Unaccepted Keys:
Rejected Keys:
[root@conductor t128]#



1- restart the 128T.service on the router

2- on the Conductor under the Router > Node select the