salt minion启动出错

抛错信息如下:

The Salt Master has rejected this minion's public key! To repair this issue, delete the public key for this minion on the Salt Master and restart this minion.

处理方法:

1 在salt master 上所有节点删除对应minion的minion_id值,/etc/salt/pki/master/minions(注意是所有master节点)

2 在minion机器上删除/etc/salt/pki/minion下的密钥文件(可不做)

3 重启salt-minion

补:

1 minion端生成一个秘钥对,并产生一个ID值,minion服务会安装ID值命名的公钥发送给 master ,直到接受为止

2 master认证完毕后,会将minion 端发送来的,以ID值命名的公钥存放在 /etc/salt/pki/master/minions 目录中

3 master认证完毕后,会将自身的公钥发送给 minion,并存储为 /etc/salt/pki/minion/minion_master.pub.

•master 秘钥对默认存储在/etc/salt/pki/master/master.pub /etc/salt/pki/master/master.pem

•master 端认证的公钥存储在:/etc/salt/pki/master/minions/

•minion 秘钥对默认存储在/etc/salt/pki/minion/minion.pub /etc/salt/pki/minion/minion.pem

•minion 存放的master公钥/etc/salt/pki/minion/minion_master.pub

猜你喜欢

转载自blog.51cto.com/2012ivan/2459199
今日推荐